Across Protocol said an attacker used social engineering against its registrar, Namecheap, to take control of its domain, prompting the team to shut its website to limit further harm.
The project operates in decentralized finance, offering a service for transactions between separate blockchain networks. Across kept the website offline while securing access and investigating.
Across credited Cloudflare and SEAL911 with helping identify its web address as unsafe and contain a phishing page. The team told visitors to avoid the site during the response and urged people affected by the phishing attempt to revoke permissions tied to integrations they did not trust.
In a later update, Across said it had regained its official domain, that its systems were operating normally again and that it would compensate affected users, as EconoTimes reported in its coverage of the domain recovery and compensation plan. Across also said it planned to publish a fuller account of the incident.
