Across Protocol Regains Control of Hijacked Site, Promises Full Reimbursement After Phishing Attack

Across Protocol, a cross-chain bridge, has regained control of its official website after a phishing attack hijacked the domain and has pledged to fully reimburse affected users.

Cointelegraph reported on November 11 that Across Protocol recovered control of its official domain, across.to, with support from domain registrar Namecheap. The protocol said all related systems are now operating normally and that users who suffered losses in the attack will be reimbursed in full.

In a post on X, Across Protocol said it would ensure all affected users receive full compensation for their losses. It plans to release a detailed report within days on how the incident unfolded and the findings of its investigation. The protocol has not disclosed the total losses or the number of affected users.

The incident began on November 10, when an attacker carried out a social engineering attack targeting Namecheap. The attacker gained control of the official domain at about 6:45 p.m. UTC and replaced the legitimate website with a phishing site designed to steal user funds.

Across Protocol said it detected suspicious activity about 15 minutes after the attack began and moved to block the website. SEAL911, a security response group, reported the domain as a phishing site to major crypto wallet providers. Cloudflare also classified it as dangerous and removed the related Domain Name System records.

Some users may have been affected if they accessed the malicious site before it was fully blocked. Across Protocol said customers using integrations with external services and its application programming interface, or API, were not affected.

Across Protocol is one of the larger cross-chain bridges used to move assets across major blockchains. DefiLlama data shows it processed about $5.9 billion in asset transfers over the past 30 days, ranking third by transaction volume behind Circle and LayerZero.