The project team enabled hardware 2FA, but the domain was still stolen.

On November 10, Across’s official website was hijacked: attackers social-engineered the domain registrar and replaced the site with a phishing page. Around 9 wallets lost nearly $300,000, while the contracts themselves were unaffected.

Official website ≠ security. Use a bookmark for large transactions, then check your approvals after signing.

Have you bookmarked it?