Across Protocol Warns Users to Avoid App Following Reports of Drained Wallets

Cross-chain bridge Across Protocol warned users on Tuesday not to interact with its frontend or connect their crypto wallets amid an ongoing inquiry into a suspected security breach ¹. The protocol specifically told users to avoid approving or signing any transactions until further notice, though it did not clarify the precise mechanics of the incident or confirm whether its web domain had been hijacked ¹.

The warning followed multiple user reports on X alleging illicit wallet drainages after interacting with the platform ¹. One individual claimed a loss of $9,000 in $USDC, while a second user reported unauthorized outflows totaling 7,053 USDT0 over seven transfers on the Plasma network ¹. A third user alleged their assets were drained following repeated bridge transactions, attributing the theft to a website compromise ¹. Across requested transaction hashes from affected individuals as part of its internal review ¹. Similar frontend intrusions have previously affected decentralized platforms, such as the malicious script injected into Polymarket to siphon trader funds.

Separately, decentralized artificial intelligence platform NEAR AI revealed on Monday that unauthorized actors exploited an infrastructure flaw, compromising account data for roughly 100 users and operational data across 18 AI agents ¹. According to a Nov. 9 incident disclosure, intruders leveraged a remote code execution vulnerability in SGLang—an open-source AI inference engine—to breach an internal server and linked systems ¹. The breach exposed user names, email addresses, chat logs, configurations, and API keys belonging to two clients ¹. NEAR AI stated that it patched the vulnerability, revoked compromised credentials, and restored its cloud environment ¹.