⚠️ALERT: A hacker hijacks Across Protocol’s website by tricking its domain registrar, Namecheap.
The attacker used social engineering on Namecheap to seize across(.)to around 18:45 UTC and turned it into a phishing site.
Across says some users who visited the site may have been affected, and all of them “will be made whole.”
The team adds that Namecheap “has been unresponsive,” keeping its app and API offline.
Anyone who connected a wallet to across(.)to today is advised to revoke any permissions they granted.
⚠️ALERT: Across Protocol warns users NOT to connect their wallets to its app.
Users are being told not to visit the app or sign any transaction or approval there “until further notice.”
Across says it is investigating an issue with its domain.
It has not said whether any funds have been lost.
The crosschain bridge has moved over $4 BILLION for Uniswap users alone.