Social Engineering Attack Targets Across Protocol's Domain
Across Protocol's domain registrar was compromised in a social engineering attack, leading to a phishing site. The team responded quickly to mitigate the threat and protect users.
On November 10, 2026, Across Protocol's domain registrar, Namecheap, experienced a social engineering attack that allowed an attacker to gain control of the across.to domain. This breach resulted in the setup of a phishing site aimed at deceiving users. The Across Protocol team was alerted to the situation within approximately 15 minutes and acted swiftly to take down the phishing site. Assistance from SEAL911 and Cloudflare was instrumental in flagging the site as phishing and pulling the DNS records to prevent further access.
During the brief window of exposure, some users who visited the site and connected their wallets or signed approvals may have been affected, although the incident did not involve a smart-contract exploit. The project has committed to making all affected users whole and has advised them to revoke any permissions that may have been granted during the incident. It is noted that third-party integrations and API users were not impacted by this attack.