Across Protocol Hack: How a Domain Hijack Turned a Trusted Bridge Into a Phishing Page

Yesterday, we tweeted a warning from the AirdropAlert X account the moment we saw the Across site acting up. The attack was still running, and every minute mattered. Now the dust has settled, so here is the full story. Short answer: The Across Protocol hack was a domain hijack, not a smart contract exploit. On November 10, an attacker used social engineering against the domain registrar Namecheap and took control of across.to. Visitors landed on a phishing copy that drained connected wallets. Security platform GoPlus estimates losses at about $350,000 across six chains.