Across domain hijacked: If you’ve used across.to, revoke your approvals and don’t visit the official site for now
At around 2:45 a.m. this morning (Hong Kong time), the official website of cross-chain bridge Across, across.to, was taken over by an outside party and briefly replaced with a phishing page. The team said the domain registrar Namecheap was hit by a social engineering attack, allowing the attackers to take control of the domain. The team received an alert about 15 minutes later and took the site offline. SEAL911 subsequently flagged it as a phishing site, and Cloudflare removed its DNS records. The phishing page can no longer be accessed.
Who may be affected: The team says some users may have been affected if they visited across.to before it was taken offline and connected a wallet or signed an approval there. Users who accessed the service only through third-party integrations or the API are not affected, according to the team. This was not an exchange hack, nor is it a confirmed smart contract vulnerability. The team has not yet disclosed the amount of any losses. Some users online say their funds were transferred, but this has not been independently verified.
The team says it will compensate all affected users and recommends first revoking relevant approvals at revoke.cash—simply disconnecting your wallet does not automatically cancel approvals. The frontend and API will remain offline until the domain is secure again. Namecheap has not yet made a public statement, so don’t visit across.to or sign anything there for now.
Have you visited across.to recently and signed a transaction there?
Not investment advice.
Source: Across official X account (approximately 2026-11-11 02:45–08:14 HKT); reported by PANews and Odaily · approximately 2026-11-11 09:30 HKT
#Across #跨链桥 #钓鱼 #夯B媒体 $ACX
At around 2:45 a.m. this morning (Hong Kong time), the official website of cross-chain bridge Across, across.to, was taken over by an outside party and briefly replaced with a phishing page. The team said the domain registrar Namecheap was hit by a social engineering attack, allowing the attackers to take control of the domain. The team received an alert about 15 minutes later and took the site offline. SEAL911 subsequently flagged it as a phishing site, and Cloudflare removed its DNS records. The phishing page can no longer be accessed.
Who may be affected: The team says some users may have been affected if they visited across.to before it was taken offline and connected a wallet or signed an approval there. Users who accessed the service only through third-party integrations or the API are not affected, according to the team. This was not an exchange hack, nor is it a confirmed smart contract vulnerability. The team has not yet disclosed the amount of any losses. Some users online say their funds were transferred, but this has not been independently verified.
The team says it will compensate all affected users and recommends first revoking relevant approvals at revoke.cash—simply disconnecting your wallet does not automatically cancel approvals. The frontend and API will remain offline until the domain is secure again. Namecheap has not yet made a public statement, so don’t visit across.to or sign anything there for now.
Have you visited across.to recently and signed a transaction there?
Not investment advice.
Source: Across official X account (approximately 2026-11-11 02:45–08:14 HKT); reported by PANews and Odaily · approximately 2026-11-11 09:30 HKT
#Across #跨链桥 #钓鱼 #夯B媒体 $ACX
