# Revised Trace Links Aave Depositor’s $304,500 Loss to Across Hijack By Simon Yoon Canonical URL: https://www.tokenpost.com/news/technology/56117 Published: 2026-11-13T00:46:12.000Z Updated: 2026-11-13T00:46:12.000Z Section: Technology > The trace puts total losses at $401,900 across nine wallets after adding a separate 26.38 Ether (ETH) sweep. A revised on-chain trace links a transfer of $304,500 in Aave WETH deposit tokens to the Nov. 10 Across Protocol website hijack, while leaving the depositor’s site visit unconfirmed. The trace covers nine wallets on Ethereum, Arbitrum, Base, BNB Chain and Optimism. It places the transfers between 2:02 p.m. and 4:53 p.m. ET on Nov. 10, valuing assets at the time they were taken. Across has not published its own loss total. The trace attributes 148.60 Aave WETH deposit tokens (aWETH) to one depositor, valued at $304,500 when transferred. That is about 76% of the revised estimate. The aWETH transfers occurred in four pulls over about three minutes after a spending permit. The first transaction was recorded at 3:09:23 p.m. ET (20:09:23 UTC); on-chain records show an unlimited approval and transfers to two wallets. The trace links the transfers to the Across incident based on their timing and recipient wallets. On-chain records do not identify which website the depositor visited or when an off-chain signature was made, so the site visit is unconfirmed. The revised estimate adds a separate sweep of 26.38 Ether, valued at about $54,000 at the time, to an earlier $348,000 tally. About 20.95 ETH from that sweep reached the attacker’s wallet within 10 minutes. Across said social engineering involving its domain registrar, Namecheap, gave an attacker control of its domain at about 1:45 p.m. ET (18:45 UTC) on Nov. 10. On Nov. 11, the protocol said it had regained control and its systems were working normally. “All affected users will be made whole,” Across said, adding that it planned to publish a post-mortem. The pledge does not confirm that reimbursements have been paid. TokenPost previously covered [Across’s recovery and compensation pledge](). Aave deposit tokens represent assets supplied to the lending protocol. The trace concerns wallet approvals and token transfers; it does not establish that Aave’s contracts were exploited. The $401,900 estimate is a floor: the analysis did not cover every chain and excluded two stolen tokens without a market price. Across has not confirmed the estimate and has said it plans to publish a post-mortem. ## Links in this article - [Across’s recovery and compensation pledge](https://www.tokenpost.com/news/technology/54546)