Across Protocol domain hijack causes about $350,000 in losses
A social engineering attack targeting domain registrar Namecheap led to the hijacking of Across Protocol's official domain, redirecting visitors to a phishing site. Users were tricked into granting malicious token approvals, causing an estimated $350,000 in asset losses across six blockchains. The team said it had regained control of the domain, restored the service and would compensate affected users.
Key facts
- Affected organization
- Across Protocol
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- Estimated cryptocurrency losses of approximately $350,000
- Cause / method
- A social engineering attack targeting domain registrar Namecheap enabled a domain hijack, followed by attempts to trick users into granting malicious token approvals
- Location
- Other countries
If your data was exposed
Exposed dataCrypto assets
- Check login and withdrawal history in your exchange app, and turn on withdrawal address whitelisting and withdrawal delays.
Timeline
- Phishing losses resulting from the domain hijack were estimated at approximately $350,000, and the team announced service restoration and plans to compensate affected users.
5 related reports
- Across Protocol Domain Hijacked via Namecheap Social Engineering Attack, Users to Be Made Whole
- Across bridge site hijacked, wallets drained
- Across Protocol restores website after phishing attack, $350K in estimated losses
- Crosschain protocol Across restores systems after domain hijack
- Across Protocol Recovers Website After Hackers Seize Control of Domain
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.