News · Security & Hacks
The cross-chain bridge regained control of its domain following a Namecheap social engineering compromise and pledged to compensate affected users.
Key point 1 of 3
01
Attackers hijacked Across Protocol's across.to domain around 18:45 UTC on Tuesday using a social engineering attack against registrar Namecheap .
Key point 2 of 3
02
SEAL911 and Cloudflare intervened to restrict traffic before the team recovered the domain with help from Namecheap's founder .
Key point 3 of 3
03
Across pledged to make all affected users whole and noted third-party integrations and API users were unaffected .
Context
Registrar-level social engineering remains a critical vulnerability for DeFi platforms relying on Web2 infrastructure for frontend routing, bypassing smart contract security…
Why it matters
Users who executed transactions on the compromised frontend face wallet losses, while Across faces compensation costs; API consumers and integrators avoided harm.
What to watch
Release of the official Across post-mortem report and details on the compensation claims process.
Sources
Built from 1 primary source, machine-checked before publication.
Keep reading
Read the full story
AI-generated, source-verified. Sources, citations and live prices on the article page.