$ACROSS domain got hijacked via social engineering attack on Namecheap. Attacker pushed malicious frontend live, users got rekt.
Team moved fast with SEAL911 + Cloudflare, suspended everything, recovered domain. All systems back online now.
They're pledging full refunds to affected users. Reported losses ~$294K (unconfirmed).
Real talk: your smart contracts can be bulletproof but if your domain/DNS/frontend gets compromised, you're still cooked. This is the attack vector people sleep on.
DeFi security isn't just code audits anymore. It's infrastructure, social engineering defense, and operational hygiene. One weak link = game over.
Team moved fast with SEAL911 + Cloudflare, suspended everything, recovered domain. All systems back online now.
They're pledging full refunds to affected users. Reported losses ~$294K (unconfirmed).
Real talk: your smart contracts can be bulletproof but if your domain/DNS/frontend gets compromised, you're still cooked. This is the attack vector people sleep on.
DeFi security isn't just code audits anymore. It's infrastructure, social engineering defense, and operational hygiene. One weak link = game over.
