Across Protocol Recovers Domain After Phishing Breach
After a tense period of downtime, Across Protocol has confirmed that it successfully regained control of its domain following a sophisticated hijacking attempt. The attack, which occurred on November 10, utilized social engineering against the project’s domain registrar, Namecheap. This allowed hackers to redirect unsuspecting users to a phishing page, resulting in approximately $350,000 in losses across several blockchain networks.
Across Protocol: How the Attackers Targeted Users
The breach did not involve the protocol’s smart contracts, which remained secure throughout the incident. Instead, the attackers targeted the user-facing frontend. By manipulating domain settings, they created a convincing fake site. GoPlus Security identified that the phishing page specifically requested EIP-2612 permits, which allowed the attackers to drain funds from wallets on chains like Base and BNB. This approach shows that even well-audited projects like Across Protocol can be vulnerable to infrastructure-level attacks.
Across Protocol: Rapid Response and Service Restoration
Upon discovering the anomaly, the project team acted within 15 minutes to mitigate the damage. They paused all frontend and API services to protect their user base, while simultaneously collaborating with the SEAL911 security team. Cloudflare played a crucial role by deleting the malicious DNS records associated with the phishing site. By November 11, Across Protocol had re-secured its domain, and all services were restored to normal operation.
Analyzing the Broader Security Landscape
This incident underscores the fragility of web-based interfaces in decentralized finance. When users interact with a bridge, they rely on the domain to be an accurate gateway to the smart contracts. Because the domain itself was compromised, users had no way to verify they were on the official site. The team behind Across Protocol has already issued a statement confirming that all affected users will be made whole, providing a critical level of accountability.
- Total assets lost: $350,000
- Resolution time: Reclaimed within one day
- Impacted chains: Ethereum, Arbitrum, Base, BNB, Ink, Plasma
- Status: Normal operations restored
The Bottom Line for Modern DeFi Users
What this means for the future is that infrastructure security must match the rigor of code audits. While Across Protocol successfully mitigated the breach and restored trust, the event highlights the need for better domain security protocols, such as using high-security registrars with strict access controls. For users, the lesson is clear: verify every permit request and treat any unexpected site behavior as a potential security risk.
For full official background and direct documentation, read the source coverage on Gadgets360.com Reporting.
