Across Bridge Tells Users to Stay Off Its App Over Domain Issue

Crosschain bridge Across warned on X on Tuesday, Nov. 10, that it is investigating an issue with its domain. Users should not visit the app, connect a wallet, or sign any transaction or approval "until further notice," the team said, promising updates.

Details

The post does not describe the nature of the incident or say whether the website was compromised. According to Cointelegraph, at least three users publicly reported losses: one lost $9,000 in USDC, another 7,053 USDT across seven transactions on Plasma, and a third said their wallet was fully drained after several bridge transfers. Cointelegraph said it had not independently verified the reports, and Across did not immediately respond to a request for comment. The total number of affected users is unknown. Coinfomania also confirms the warning.

In comparable cases, a hijacked domain or spoofed front end tricks users into signing an approval that lets a malicious contract sweep their tokens. That is only an assumption based on the shape of the warning; Across has not named a cause.

What this means for the market

Across is a prominent bridge between networks, and until the cause is stated, any activity through its app carries risk. Users who signed approvals on the site recently may want to review and revoke them, and should reach the official address only through the project's verified channels. We will update this story if Across reports significant losses. See the Across Protocol token page and the daily brief for market context.