Across Protocol restored its website after hackers hijacked its domain through a social engineering attack against registrar Namecheap. Users were redirected to a phishing site while the team regained control. That is the observable fact. The interpretation is more consequential: a cross-chain bridge is only as secure as its weakest off-chain dependency, and domain infrastructure is rarely priced into token valuation.

Across sits in the intent-based bridging narrative, competing with LayerZero, Wormhole, and Hyperlane for cross-chain flow. The market tends to price bridges on transaction volume, total value locked, and token incentives. It rarely discounts for registrar compromise, DNS hijacking, or social engineering of infrastructure providers. The Across incident suggests that gap may be too wide.

The catalyst to watch is whether users migrate to bridges with stronger operational security, multisig domain controls, or registrar locks after this event. If bridge volume shifts measurably toward competitors with public security audits of their off-chain infrastructure, the market is beginning to price operational risk. Another catalyst is any disclosure of user fund losses from the phishing site; even a small number could trigger reputational repricing across the intent-based bridge sector.

The risks are asymmetric. A domain hijack does not necessarily imply smart contract vulnerability, yet users cannot distinguish the two in real time. If phishing victims appear, Across could face liquidity outflows regardless of contract integrity. Conversely, if no funds are lost and the protocol resumes normal volume quickly, the market may treat the event as isolated noise, reinforcing the current underpricing of infrastructure risk.

A falsifier would be sustained bridge volume growth for Across alongside unchanged token performance after the restoration. That would indicate the incident had no material effect on user behavior or valuation. A counter-falsifier would be volume migration to competitors with no corresponding smart contract issues at Across, signaling that operational security is becoming a competitive differentiator.

Macro context matters. BTC is down 1.30% over 24 hours and ETH down 2.62%, with total market cap down roughly 4%. Risk assets are under pressure, which amplifies the impact of any security narrative. In this environment, investors are less likely to forgive operational lapses, even when contracts remain intact.

The takeaway is that cross-chain infrastructure risk is underpriced relative to smart contract risk. Domain and registrar security should be treated as part of the threat model for bridge protocols, not as an afterthought. Investors should ask whether a bridge’s off-chain dependencies are as resilient as its on-chain code before allocating capital.