Across Protocol Regains Hijacked Domain; GoPlus Puts Losses at $350K

Across Protocol said it has regained control of its website after attackers hijacked its domain, with security firm GoPlus estimating user losses of nearly $350,000, The Block and crypto.news reported on November 11.

According to The Block, the takeover began around 18:45 UTC on November 10, when attackers socially engineered domain registrar Namecheap to gain control of the across.to domain. Visitors were redirected to a phishing page that asked them to sign fake token approvals or permits. crypto.news reported that the bridge’s smart contracts were not exploited.

Across said it received an alert about 15 minutes after the takeover. SEAL911 flagged the domain as phishing to wallet providers, and Cloudflare removed its DNS records. Across temporarily suspended its frontend and API while it worked to regain the registrar account, and crypto.news reported that Namecheap’s founder later helped secure it.

GoPlus estimated the losses across Ethereum, Arbitrum, Base, BNB Chain, Ink and Plasma. Across has not confirmed that figure or the number of affected users. The team said “Across is fully restored, and all systems are operational,” that API users and third-party integrations were unaffected, and that “all affected users will be made whole.” It promised a full post-mortem in the coming days.

Users who connected wallets during the attack were advised to review and revoke approvals granted on November 10, for example through Revoke.cash.

Track the market yourself with AiTraderView’s FREE tools: Crypto Cockpit for charts and 75+ indicators, Crypto Screener to find setups, and Crypto Portfolio to follow your holdings. Just create a FREE account and try them yourself!

Sources:

• The Block: Crosschain protocol Across restores systems after domain hijack

• crypto.news: Across Protocol restores website after phishing attack, $350K in estimated losses