Across Protocol says social engineering attack on Namecheap hijacked its domain
The cross-chain bridge says attackers took over its across.to domain on 10 November and redirected visitors to a phishing site, and that it has now regained control with Namecheap's help.
Key points
- Across says the attacker gained control of its domain at about 18:45 UTC on Tuesday and the team was alerted within 15 minutes.
- The bridge says Namecheap founder Richard Kirkendall helped it recover the across.to domain, and that affected users will be made whole.
- DefiLlama data cited by the article ranks Across third by 30-day transfer volume, with about $5.9bn processed.
Across Protocol says a social engineering attack on Namecheap let hackers hijack its domain and replace its website with a phishing site, Cointelegraph reports.
According to the team, the attacker took control of the domain at about 18:45 UTC on Tuesday. Across said it was alerted within 15 minutes and moved to shut the site down, while the security group SEAL911 flagged the domain as phishing with major wallets and Cloudflare marked it at risk before removing its DNS records.
What to watch: Across says it will publish a full post-mortem in the coming days and make all affected users whole.
Live updates on NewsFeeds:MacroDesk editor: Keshav Aggarwal (accountable for this page; this summary was not edited by hand)
How this was produced: an AI model wrote this summary of Cointelegraph’s report, which we credit and link above. Read our Editorial and AI policy. Spotted a mistake? See Corrections.
Not investment advice. Read the risk disclaimer.