Across Protocol said it regained control of its across.to domain after a social engineering attack on its registrar, Namecheap, let an attacker replace its website with a phishing site. Across said its systems are working normally, but users who visited the site before it was fully blocked may have been affected. Reports of drained wallets prompted an earlier warning to avoid the app; the number of affected users and total losses have not been disclosed.
Across said third-party integrations and API users were unaffected. It said all affected users would be made whole and promised a post-mortem.
