Across Protocol recovers site after domain-linked phishing incident
Across Protocol restored its website after attackers used social engineering tied to domain registrar Namecheap to redirect users to a phishing page.
Across Protocol restored its website after attackers used social engineering tied to domain registrar Namecheap to redirect users to a phishing page. This is an original Token Times brief synthesising 3 outlets (Crypto.news, Cointelegraph, The Block), plus live market data, as of Wed, 11 Nov 2026 12:00:01 UTC.
The incident exposed how access to a protocol’s domain can become a direct route to user losses, even without compromising its underlying cross-chain infrastructure. The scale of the attack and Across’s reimbursement commitment will shape how users and counterparties assess third-party security risks.
- Across restored its website after attackers redirected users to phishing pages.
- Crypto.news estimates user losses at $350,000 and reports a reimbursement promise.
- Social engineering targeting Namecheap enabled the domain redirection.
- Crypto market capitalization stands at $2.52 trillion amid widespread fear.
Crypto.news and Cointelegraph agree that social engineering targeting Namecheap allowed attackers to redirect Across Protocol users to a phishing site. Crypto.news additionally reports that the protocol restored its website, estimates user losses at $350,000, and intends to reimburse victims. Cointelegraph focuses more narrowly on the social-engineering route and its connection to the domain registrar; the supplied coverage does not contradict Crypto.news on the incident’s mechanics or remediation.
Across Protocol has restored its website following a phishing incident in which attackers redirected users away from the protocol’s legitimate online presence. Crypto.news reports the disruption was enabled by a domain hijack connected to registrar Namecheap, while Cointelegraph describes a social-engineering attack targeting Namecheap that led users to a phishing site. The underlying cross-chain bridge was not described as compromised in the supplied coverage.
Crypto.news estimates that users lost approximately $350,000 during the incident. According to that outlet, Across Protocol has promised to reimburse affected users, making reimbursement a central part of the protocol’s response. Cointelegraph’s coverage corroborates the attack vector but does not provide a separate loss estimate in its supplied summary.
The two reports converge on the importance of domain security in protecting protocol users. The reported mechanism was not a failure of the cross-chain bridge itself; instead, social engineering against the domain registrar enabled attackers to redirect visitors toward a fraudulent interface. That distinction matters because users could still be exposed to asset-stealing phishing pages through a trusted entry point even if the protocol’s on-chain systems remained unaffected.
The website’s restoration marked the end of the reported redirection period, according to Crypto.news. The remaining issues include the scope of affected transactions, the practical delivery of reimbursements, and whether the domain setup is changed to reduce the risk of another redirection attempt. The supplied reports do not specify the number of victims, the precise dates of the attack, or whether losses have already been returned.
Market conditions provided little sign of a broad shift alongside the incident. Total crypto market capitalization is $2.52 trillion and the overall market is flat.
Bitcoin is down 0.89% over 24 hours, while the Fear & Greed Index stands at 29, placing sentiment in the Fear zone. No specific coin tied to the incident was identified, so these figures serve as wider market context rather than evidence of a reaction to the phishing attack.
Figures and sectors in this story, checked live against on-chain aggregators · November 11, 2026.
Token Times reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.
Across Protocol recovers site after domain-linked phishing i — questions & answers
How did attackers redirect Across Protocol users?
Social engineering targeting domain registrar Namecheap allowed hackers to redirect users to a phishing site, according to both outlets.
How much did users reportedly lose?
Crypto.news estimates user losses at approximately $350,000. No alternative estimate was supplied by Cointelegraph.
Has Across restored its website?
Yes, Crypto.news reports that the protocol restored its website after the domain-related phishing incident.
Which outlets reported this story?
This is an original Token Times brief that synthesises reporting from Crypto.news, Cointelegraph, The Block, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.