Across official website domain hijacked, frontend and API suspended, full compensation to be provided to affected users.

BlockBeats news, November 11 - According to cross-chain protocol Across, at approximately 02:45 Beijing time, attackers gained control of Across's official website domain through a social engineering attack targeting domain registrar Namecheap. Across received an alert within 15 minutes of the incident and began taking the website offline. SEAL911 assisted major wallets in flagging the domain as a phishing site, and Cloudflare subsequently removed its DNS records. As of the announcement, the phishing page is no longer accessible.

Across stated that some users who visited the official website before the phishing page was fully blocked may have been affected. Users who visited the website before the attack, as well as users who accessed the protocol through the API or third-party integrations, were not affected by this attack. Across has committed to fully compensating affected users, and urges users to use the wallet they had connected at the time to revoke relevant permissions granted that day on Revoke.cash.

Across said it has not yet received a response from Namecheap, and the frontend and API will remain suspended until the domain is confirmed secure. The team will investigate the cause of the domain takeover and publish an incident post-mortem once more information is available.