Across restores operations after domain hijack hits crosschain protocol

Traders Union
All News
Crypto
Across restores after hijack

Highlights

Across restored normal operations after recovering its domain hijacked via social engineering at Namecheap, with estimated user losses of about $350,000.
Across committed to fully reimbursing all users affected by wallet-draining phishing attacks on multiple chains, including Ethereum, Arbitrum, Base, BNB Chain, Ink, and Plasma.
DefiLlama data shows $8.78 billion lost in 341 crypto exploits year to date, highlighted by a $6.36 billion Binance breach, amid growing security threats.

Domain takeover response and user compensation

As reported by The Block, citing Across in a post on X, attackers gained control of the protocol's official domain at around 18:45 UTC on Nov. 10 through a social engineering attack targeting its domain registrar, Namecheap. The protocol said it received an alert within 15 minutes and moved to take the website offline.

Across said security response group SEAL911 flagged the site as a phishing domain with major wallet providers, while Cloudflare marked the domain as at risk and later removed its DNS records. That made the phishing page inaccessible before Across said on Wednesday that it had recovered the domain with Namecheap's help and returned all systems to normal operations.

The protocol did not disclose how many users were affected or the scale of losses, but security platform GoPlus estimated total user losses at about $350,000. GoPlus said funds were stolen from wallets on Ethereum, Arbitrum, Base, BNB Chain, Ink and Plasma after users were lured into signing fake token approvals or permits designed to drain wallets.

Across said all affected users will be made whole.

Broader crypto security strain intensifies

In a separate incident, decentralized exchange Arcus said on Tuesday that it lost about $2.23 million in USDG stablecoins because of an accounting bug that let an account record a larger balance than it actually held. Arcus said the exploiter also sought another $3 million in withdrawals, but those attempts were blocked by the rate limit on its bridge.

The exchange said no other user accounts were affected and that it has fully covered the temporary shortfall from its treasury. The two incidents come as crypto platforms face a rise in breaches and phishing campaigns, with AI tools helping attackers move faster and use more sophisticated methods.

Data from DefiLlama shows $8.78 billion has been lost across 341 crypto hacks and exploits year to date, led by a $6.36 billion breach at Binance.

As we noted earlier, cybersecurity funding trends in Q3 showed larger late-stage rounds despite fewer overall deals.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.