Across Protocol Restores Website Following Domain Hijacking Attack

Across Protocol recovers official domain after phishing incident

Across Protocol, a prominent cross-chain bridge, has regained control of its website after a cyberattack. A cross-chain bridge is a tool that allows people to move digital assets between different blockchains.

On Tuesday, hackers hijacked the protocol's domain, across.to, and replaced the legitimate site with a phishing page. This malicious site was designed to trick users into connecting their wallets—digital tools used to store cryptocurrency—so the attackers could drain their funds.

Important details of the attack

• The attack began around 18:45 UTC on Tuesday after hackers targeted the domain registrar Namecheap.
• Across Protocol staff noticed the breach within 15 minutes and moved to shut down the site.
• Security groups and service providers like SEAL911 and Cloudflare helped flag the site as dangerous and remove malicious records.
• The website was fully restored and returned to official control by Wednesday.

Official response from the Across team

The Across Protocol team confirmed the restoration of their systems through a post on X (formerly Twitter). They stated that they worked directly with Namecheap founder Richard Kirkendall to resolve the issue. According to the team, all protocol systems are now functioning normally.

What has been confirmed about the breach

The protocol attributed the incident to a social engineering attack. This is a tactic where hackers trick people or companies into giving up access to secure systems rather than using technical software bugs. The breach specifically targeted the domain management service and did not affect the protocol’s internal API or third-party integrations.

Remaining uncertainties regarding total losses

While the website is back online, some details are still missing. It is not yet known exactly how much money was stolen from users who interacted with the phishing site before it was blocked. Additionally, the specific number of users who had their wallets drained has not been disclosed.

Why the incident matters for bridge users

Across Protocol is a major player in the crypto industry, ranking as one of the largest bridges by trading activity. Data shows it processed approximately $5.9 billion in transfers over the last 30 days. Because so many users rely on this service to move funds, a domain hijack can lead to significant financial risks for the community.

Commitment to user reimbursement and future reports

The Across team has promised that all users who lost funds during this attack will be "made whole," meaning they will be reimbursed for their losses. The project also plans to release a full post-mortem report in the coming days to provide more technical details about how the attack happened and how they responded.

Sources

• Cointelegraph