🚨 **ACROSS PROTOCOL SECURITY ALERT: DOMAIN HIJACK INVESTIGATION — DO NOT INTERACT OR SIGN TRANSACTIONS**
Leading cross-chain bridge Across Protocol issued an urgent official warning alerting the community to an ongoing frontend domain compromise resulting from a registrar-level social engineering attack:
---
### 1. OFFICIAL PROTOCOL STATUS & TIMELINE
- **Initial Warning:** Across Protocol confirmed an active domain security investigation, instructing users to immediately avoid accessing the web application.
- **Attack Vector:** Subsequent team updates confirmed that attackers executed a social engineering attack against domain registrar **Namecheap**.
- **Mitigation Response:** The Across core team acted to take down the affected frontend within 15 minutes of detection to minimize exposure.
- **Current State:** The domain remains **OFFLINE**. No official all-clear has been declared.
---
### 2. DAMAGES & IMPACT ASSESSMENT
- **Community Reports:** Isolated user reports indicate potential losses (including unconfirmed mentions of 9,000 USDC and ~7,053 USDT).
- **Official Verification:** Across Protocol has **not confirmed any total stolen figure** at this stage. Smart contract logic and bridge pools remain under review as the investigation proceeds. A formal post-mortem will be published once registrar control is fully restored.
---
### 3. MANDATORY SECURITY DIRECTIVES FOR ALL USERS
1. ❌ **DO NOT** visit or open any Across Protocol web domains or mirrored frontends.
2. ❌ **DO NOT** connect Web3 wallets or permit session approvals.
3. ❌ **DO NOT** sign any transactions, permit signatures, or contract interactions.
4. 🔍 **Verify Approvals:** If you interacted with the frontend during the compromise window, check and revoke outstanding token allowances via verified revocation tools immediately.
---
💡 **COINXSIGHT QUANTITATIVE SECURITY VERDICT:**
Frontend and DNS registrar attacks remain a persistent systemic vulnerability for DeFi protocols. Users are advised to rely strictly on official protocol communication channels and wait for a verified cryptographic all-clear before resuming bridge activity.
🔗 **Real-time Orderbook Telemetry & Security Radar:** [coinxsight.com](https://app.coinxsight.com/whale-flow)
#Security #DeFi #Crypto