🛡️ Across Protocol restores its site after a domain hijack

Crosschain protocol Across has regained control of its website and resumed normal operations on Wednesday after a domain takeover that redirected visitors to a phishing site. At around 18:45 UTC on Nov. 10, attackers seized the official domain through a social-engineering attack on registrar Namecheap, Across said. The team got an alert within 15 minutes. SEAL911 flagged the domain with major wallet providers, and Cloudflare later removed its DNS records.

Across did not disclose how many users were hit or how much was lost. Security firm GoPlus estimated losses at about $350,000, with funds taken from wallets on Ethereum, Arbitrum, Base, BNB Chain, Ink and Plasma. Later on Wednesday, Across said it had recovered the domain with Namecheap's help, restored systems, and would make all affected users whole.

⭐ The protocol has pledged to repay victims, underscoring that the risk was at the domain layer, not the smart contracts.

#crypto #DeFi #security