Across Protocol Regains Website After Social Engineering Attack on Registrar Hijacks Domain

Attackers hijacked the domain of cross-chain bridge Across Protocol on November 10 by social engineering its registrar, Namecheap, and redirected visitors to a phishing page. GoPlus Security estimated roughly $350,000 was stolen from crypto wallets across several networks, though the smart contracts were not exploited. Across suspended its frontend and API services while working with security teams to take down the fraudulent site, and has since regained control and pledged to compensate affected users.

Why it matters: The incident shows that registrar account takeover can bypass strong on-chain and application security, so IT teams should lock down domain registrar accounts with MFA, registry locks, and alerts on DNS changes.