Across Protocol Issues Domain Warning Following Security Abnormalities

The cross-chain bridge Across Protocol has issued an urgent advisory to its users following the discovery of abnormalities regarding its official domain name. On November 10, 2026, the project team confirmed they are actively investigating potential security risks associated with their web interface. Users are instructed to avoid all interaction with the platform's front-end application to prevent the potential loss of digital assets or unauthorized wallet access.

Investigation Into Domain Name Vulnerabilities

The technical team at Across announced via the X platform that they are currently performing a forensic analysis of their domain infrastructure. While the underlying smart contracts on various blockchains—including Ethereum, Arbitrum, and Optimism—remain the core of the bridge's functionality, a domain-level compromise can lead to "front-end hijacking." In such scenarios, attackers can replace legitimate transaction requests with malicious ones.

Domain Name System (DNS) attacks are a recurring threat in the decentralized finance (DeFi) ecosystem, often used to trick users into signing approvals for drainer contracts.

To ensure the safety of user funds, the protocol has established the following temporary guidelines:

• Users should not access the web application or any mirrors until an official "all-clear" is given.
• Connecting hardware or software wallets to the Across interface is strictly discouraged.
• Transaction signatures or token authorizations must be avoided entirely during this investigation period.

Security Protocols and User Protection

While the specific nature of the abnormality has not been detailed, the Across team emphasized that they will provide periodic updates as the situation evolves. This incident highlights the ongoing risks associated with the centralized components of decentralized applications (dApps), specifically the DNS layer which connects users to the blockchain.

Until further notice, users are advised not to access its application, connect their wallets, or sign any transactions or authorizations on the application.

This proactive warning is intended to mitigate the risk of phishing attacks or "ice phishing", where users unknowingly grant permissions to an attacker to spend their tokens. As of the current report, the protocol has not confirmed any loss of funds, but the investigation remains the top priority for the project's security engineers.

The situation serves as a critical reminder for the DeFi community to verify information through official social media channels and to exercise extreme caution when interacting with web interfaces during reported technical disruptions. Further technical disclosures regarding the Across domain status are expected once the vulnerability is successfully remediated and the site is deemed safe for public use.