cointelegraph.com Across Protocol Users Report Drained Wallets Amid Security Incident
Article Content
- •Across Protocol warns users to avoid its app due to potential security issues.
- •Users report significant losses, including $9,000 in USDC.
- •NEAR AI disclosed a separate security breach affecting 100 users.
Across Protocol, a crosschain bridging service, has warned users to avoid its app due to reports of drained wallets while it investigates a potential security incident. Users have claimed losses, including $9,000 in USDC and over 7,000 USDT0 across multiple transactions. The company has not specified the nature of the incident or confirmed if its website was compromised. In a separate incident, NEAR AI disclosed a security breach affecting 100 users due to a vulnerability in its AI infrastructure. Across Protocol has requested transaction details from affected users to further investigate the claims. Cointelegraph has not independently verified these reports.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Across Protocol in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What should I do if I used Across Protocol?
How are users affected?
What details does Across Protocol need from affected users?
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has… 
Critical RCE and LPE Vulnerabilities in Quest Foglight for Databases On November 3, 2026, the Zero Day Initiative disclosed multiple critical vulnerabilities in Quest Foglight for Databases, including six remote code execution (RCE) flaws and two local privilege escalation (LPE) vulnerabilities. The most severe RCE vulnerabilities, CVE-2026-92189 and CVE-2026-92190, allow…