Across website domain hijacked, frontend and API suspended, full compensation promised

Huo Xing Cai Jing reports that on November 11, according to the cross-chain protocol Across, at approximately 02:45 Beijing time, the attacker gained control of Across’s official website domain through a social engineering attack targeting the domain registrar Namecheap. Within 15 minutes of the incident, Across received an alert and initiated the takedown of its website. SEAL911 assisted major wallets in flagging the domain as a phishing site, and Cloudflare subsequently removed its DNS records. As of the announcement, the phishing page is no longer accessible. Across stated that some users who visited the official website before the phishing page was fully blocked may have been affected. Users who accessed the website prior to the attack, as well as those using the protocol via API or third-party integrations, were not impacted. Across commits to fully compensating affected users and revoking all permissions granted that day via Revoke.cash using the wallets connected at the time. Across noted that it has not yet received a response from Namecheap; both the frontend and API will remain suspended until domain security is confirmed. The team will investigate the cause of the domain takeover and release a post-incident review once more information is available.