Across hit by DNS hijacking attack, user losses estimated at $350K

Across suffered a DNS hijacking attack at around 6:45 p.m. UTC on Nov. 10, according to Web3 security data infrastructure GoPlus (GPS). The attacker used a social engineering attack targeting Namecheap to gain control of the Across domain and replace the official website with a phishing site. Total user losses are estimated at $350,000, with funds stolen from user wallets on Ethereum, Arbitrum, Base, BNB Chain, Ink, and Plasma. Across announced it had regained control of the domain and restored its system, and said it plans to compensate affected users and release a detailed post-incident analysis report.