AcrossAcross domain hijacked via Namecheap social engineering attack
Across confirmed its domain was taken over by a bad actor after a social engineering attack on Namecheap, its domain registrar, at roughly 18:45 UTC. The team said it was alerted within 15 minutes and has taken the domain down while securing it against the attack.
- Users are urged not to visit the app, connect a wallet, or sign any transaction or approval until further notice
- Anyone who visited the compromised site in the hours prior should contact the team via DM and revoke any token approvals; Across says all affected users will be made whole
- No confirmation of stolen funds has been provided
The team posted the update in two messages on X: the domain takedown notice and the affected-user guidance.
Sources
- If you visited https://t.co/PbkNxHeM6z in the last few hours and believe that you were affected, please reach out to us via DM here on X. All affected users will be made whole. Please also go to https://t.co/CaYSUJnpCJ with the wallet you used to connect and revoke any Replying to their earlier post: The Across domain is currently down while we secure it against an attack from earlier today. At ~18:45 UTC, a social engineering attack on @Namecheap (our domain registrar) gave a bad actor control o…x.com ↗
- The Across domain is currently down while we secure it against an attack from earlier today. At ~18:45 UTC, a social engineering attack on @Namecheap (our domain registrar) gave a bad actor control of the Across domain. Within 15 minutes of this attack, we were alerted andx.com ↗
- 🚨 ALERT 🚨 We're currently investigating an issue with the Across domain. Do NOT visit the app, connect your wallet, or sign any transaction or approval there until further notice. We will post updates as we have them.x.com ↗
Across
Across protocol is a novel bridging method that combines an optimistic oracle, bonded relayers and single-sided liquidity pools to provide decentralized instant transactions from rollup chains to Ethereum mainnet.
