Across's official website domain was hijacked, front-end and API services have been suspended, and the platform will fully compensate affected users.

According to cross-chain protocol Across, at approximately 02:45 AM Beijing time, attackers gained control of Across’s official domain name via a social engineering attack targeting domain registrar Namecheap. Across received an alert within 15 minutes of the incident and immediately took its website offline. SEAL911 helped major wallets flag the domain as a phishing site, and Cloudflare subsequently removed its DNS records. As of the announcement, the phishing page is no longer accessible. Across noted that some users who accessed the official website before the phishing page was fully blocked may have been affected. Users who accessed the site prior to the attack, as well as those who used the protocol via API or third-party integrations, were not impacted. Across pledged full compensation for affected users, and will use the wallets they were connected with at the time to revoke relevant permissions granted that day on Revoke.cash. The protocol added that it has not yet received a response from Namecheap, and its frontend and API will remain suspended until the domain is confirmed secure. The team will investigate the cause of the domain takeover and release a post-incident analysis once more information is available.