Cross-chain protocol Across: domain hijacked due to social engineering attack on registrar

Cross-chain protocol Across reported that its domain registrar Namecheap was hit by a social engineering attack, giving attackers control of the Across domain at around 02:45 Beijing time on November 11. The team was alerted within 15 minutes and moved to shut down the website, while Cloudflare subsequently revoked the domain's DNS records, making the phishing site unreachable. Some users who visited the site before the fix may have been affected, though third-party integrations and API users were not impacted. Across advised potentially affected users to contact the team and revoke attacker permissions, and said its frontend and API will remain offline until the domain is securely restored. The incident highlights registrar-level social engineering as a persistent risk for DeFi frontends; what to watch next is confirmation that DNS control is fully restored and the frontend and API are safely back online.