Across Protocol warns users to avoid app amid reports of drained wallets

Across Protocol is a cross-chain bridge, so its website and domain are part of the path users rely on to reach the service. A domain hijack on that front end matters because bridge users often connect wallets and sign transactions through a web interface. The incident also comes at a time when phishing remains one of the main ways attackers target crypto users, especially when they can impersonate a familiar site.

For users, the immediate consequence is simple: a normal-looking site can no longer be trusted until the operator confirms it is back under control. Anyone who interacted with the fake page may need to assume wallet exposure and check what approvals or signatures were given. Across’s promise to reimburse victims shows the operational and financial burden that can fall on a protocol after a web-layer compromise.

The case highlights a weak point in crypto infrastructure that sits outside the blockchain itself. A bridge can have on-chain security, yet still be undermined by domain registration, DNS control, and social engineering against a registrar like Namecheap. That tension matters because crypto systems are supposed to reduce reliance on intermediaries, but users still depend on conventional web services to reach them.

Across ProtocolACX it is the asset of the company or protocol in the event

Across Protocol rose 0.5% in the 4 hours after the first headline.

15 prices, one every 30 minutes