Across Protocol domain hijack causes around $350,000 in losses
A social engineering attack targeting domain registrar Namecheap resulted in the hijacking of Across Protocol's official domain, redirecting visitors to a phishing site. Users were deceived into granting malicious token approvals, causing an estimated $350,000 in asset losses across six blockchains. The team said it had regained control of the domain, restored the service and would compensate affected users.
Key facts
- Affected organisation
- Across Protocol
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- Estimated cryptocurrency losses of approximately $350,000
- Cause / method
- A social engineering attack against domain registrar Namecheap enabled the domain to be hijacked, followed by attempts to induce malicious token approvals
- Location
- Other countries
If your data was exposed
Exposed dataCrypto assets
- Check login and withdrawal history in your exchange app, and turn on withdrawal address whitelisting and withdrawal delays.
Timeline
- Phishing losses resulting from the domain hijack were estimated at approximately $350,000, and the team announced service restoration and plans to compensate affected users.
5 related reports
- Across Protocol Domain Hijacked via Namecheap Social Engineering Attack, Users to Be Made Whole
- Across bridge site hijacked, wallets drained
- Across Protocol restores website after phishing attack, $350K in estimated losses
- Crosschain protocol Across restores systems after domain hijack
- Across Protocol Recovers Website After Hackers Seize Control of Domain
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.