Across Domain Hijacked via Social Engineering Attack; Frontend and API Services Halted

According to Across official announcement on X, attackers compromised the protocol's domain through a social engineering attack on domain registrar Namecheap at approximately 18:45 UTC on November 11. The team received alerts within 15 minutes and took immediate action. SEAL911 marked across.to as a phishing site and Cloudflare removed its DNS records; the malicious site is now fully offline.

Across suspended frontend and API services as a precaution while the domain registrar has not yet responded. The team said some users who accessed across.to during the brief window before Cloudflare blocked the site may have been affected, though third-party integrations and API users were unaffected. The protocol will conduct further investigation and publish a post-mortem report once more details emerge.

Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.