---
title: "Across Protocol Warns Users to Avoid App Following Reports of Drained Wallets"
description: "The cross-chain bridge cautioned users against connecting wallets or signing transactions while investigating a suspected security compromise."
url: https://basisdesk.news/news/across-protocol-warns-users-app-security-incident
published: 2026-11-10T21:31:23.543Z
modified: 2026-11-10T21:31:23.543Z
section: Security & Hacks
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: bearish
tickers: [USDC]
tags: [across-protocol, security-exploit, cross-chain-bridges, near-ai, vulnerabilities]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# Across Protocol Warns Users to Avoid App Following Reports of Drained Wallets

The cross-chain bridge cautioned users against connecting wallets or signing transactions while investigating a suspected security compromise.

## At a glance

- **What happened:** Across Protocol warned users on Tuesday to avoid its application and stop signing transactions following multiple reports of drained wallets.
- **Why it matters:** Frontend or contract compromises on cross-chain bridges can lead to immediate capital loss for users approving signature requests.
- **Who is affected:** Users connecting wallets to Across Protocol and users of NEAR AI's compromised internal server.
- **What's next:** Across Protocol is collecting transaction details to investigate user reports and determine the nature of the security incident.
- **Primary source:** [Across Protocol warns users to avoid app amid reports of drained wallets](https://cointelegraph.com/news/across-protocol-warns-avoid-app-drained-wallets?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound) — cointelegraph.com

## Key points

- Across Protocol advised users not to access its web application or sign approvals while it investigates a potential breach.
- Multiple users reported wallet drainages, including losses of $9,000 in USDC and 7,053 USDT0 on Plasma.
- NEAR AI separately patched a remote code execution flaw in SGLang that exposed data for roughly 100 users and 18 AI agents.

## Editorial remark

- **Context:** Frontend hijacks and dependency compromises remain persistent attack vectors across cross-chain bridges and decentralized infrastructure, targeting transaction approvals rather than core smart contracts.
- **Impact:** Users interacting with the Across bridge interface risk unauthorized wallet drains, while NEAR AI clients faced exposure of conversation logs, system configurations, and API keys.
- **Watch:** Across Protocol's forthcoming post-mortem clarifying whether the vulnerability originated from DNS hijacking, dependency injection, or smart contract logic.

Cross-chain bridge Across Protocol warned users on Tuesday not to interact with its frontend or connect their crypto wallets amid an ongoing inquiry into a suspected security breach [1]. The protocol specifically told users to avoid approving or signing any transactions until further notice, though it did not clarify the precise mechanics of the incident or confirm whether its web domain had been hijacked [1].

The warning followed multiple user reports on X alleging illicit wallet drainages after interacting with the platform [1]. One individual claimed a loss of $9,000 in $USDC, while a second user reported unauthorized outflows totaling 7,053 USDT0 over seven transfers on the Plasma network [1]. A third user alleged their assets were drained following repeated bridge transactions, attributing the theft to a website compromise [1]. Across requested transaction hashes from affected individuals as part of its internal review [1]. Similar frontend intrusions have previously affected decentralized platforms, such as the [malicious script injected into Polymarket](https://basisdesk.news/news/polymarket-breach-third-party-debugbear-script) to siphon trader funds.

Separately, decentralized artificial intelligence platform NEAR AI revealed on Monday that unauthorized actors exploited an infrastructure flaw, compromising account data for roughly 100 users and operational data across 18 AI agents [1]. According to a Nov. 9 incident disclosure, intruders leveraged a remote code execution vulnerability in SGLang—an open-source AI inference engine—to breach an internal server and linked systems [1]. The breach exposed user names, email addresses, chat logs, configurations, and API keys belonging to two clients [1]. NEAR AI stated that it patched the vulnerability, revoked compromised credentials, and restored its cloud environment [1].

## Sources

1. [Across Protocol warns users to avoid app amid reports of drained wallets](https://cointelegraph.com/news/across-protocol-warns-avoid-app-drained-wallets?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound) — cointelegraph.com, 2026-11-10

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai