🚨 Across Protocol recovered its website after a phishing attack — but some wallets could STILL be exposed
On November 10, attackers reportedly took control of the Across domain through a social engineering attack targeting its registrar, Namecheap
Visitors were redirected to a malicious website that could request dangerous token approvals
Across has now regained control of the domain and says its systems are operational again
But there's a security detail worth understanding 👇
$BNB 🔐 Disconnecting your wallet does NOT revoke token approvals
⚠️ A malicious approval can remain active even after the phishing website disappears
If you connected your wallet or signed anything on Across during the November 10 incident, review suspicious approvals and Permit2 permissions across affected networks
Revoke unauthorized allowances using a trusted tool reached independently — never through unsolicited recovery links
Across has promised to compensate affected users, but final losses and reimbursement details remain undisclosed
This wasn't a confirmed exploit of the bridge's smart contracts
The attacker targeted something users trusted before reaching those contracts — the official website
A recovered domain doesn't automatically mean a recovered wallet
$ACX
#Across #DeFiSecurity