Across frontend, API go offline after domain hijacking attack
November 10, 2026, 10:16 PM
Cross-chain protocol Across Protocol (ACX) said its frontend and API were taken offline after a domain hijacking attack and will remain unavailable until security is restored.
The protocol said the attacker gained control of the Across domain at around 6:45 p.m. UTC on Nov. 10 through a social engineering attack targeting domain registrar Namecheap. Across said the domain and phishing site have now been fully blocked, though some users who visited before the block may have been affected. It added external integrated services and API users were not impacted.
The protocol said it sent direct messages containing transaction histories to users suspected of being affected and advised them to revoke permissions granted to the attacker.
Leave the first comment
You need to log in to leave a comment.
Log In