SHOMEDIACross-chain bridge Across said on November 11 that its services were restored after a domain takeover affecting across.to. According to the team, attackers gained control of the address at about 18:45 UTC on November 10 through social engineering targeting registrar Namecheap. Visitors to the apparently legitimate domain could encounter a replacement page designed to solicit malicious wallet permissions.
The Block reported that the team was alerted within roughly 15 minutes and moved to contain the incident. SEAL911 helped wallet providers flag the site as phishing, while Cloudflare subsequently removed DNS records to make the malicious page inaccessible. Across said third-party integrations and API users were unaffected. The reports did not describe a compromise of the bridge's smart contracts.
Across then regained control of the domain and said its systems were operational again. As Cointelegraph confirmed, the team promised to make affected users whole and publish a more detailed post-mortem. Neither the total number of victims nor final losses had been confirmed by Across when the restoration was announced; external estimates should remain attributed.
The episode is a reminder for crypto-payment operators and affiliates that a familiar web address can still serve a fraudulent interface when the registrar account is compromised. Users who connected a wallet or signed approvals during the incident should review permissions and follow instructions from verified project channels rather than unsolicited messages.
Комментарии