Across restores site after domain-based phishing campaign

Across Protocol restored its website after a phishing incident that redirected users away from the legitimate site, according to Crypto.news. The cross-chain bridge estimated that affected users lost about $350,000, and the project said it would reimburse victims. The reported figure is an estimate rather than a final audited total. Cointelegraph reported that attackers used social engineering against domain registrar Namecheap, allowing them to hijack the site’s domain and redirect visitors to a phishing page. The mechanism made the fraudulent page appear through the protocol’s normal web address, meaning users attempting to interact with Across could encounter the attack without deliberately visiting an unfamiliar link. Both outlets therefore connect the incident to phishing and a domain-control failure involving Namecheap. Crypto.news adds the key operational and financial details: Across brought its website back online, placed estimated losses at $350,000 and promised reimbursement. Cointelegraph focuses more narrowly on the social-engineering route used to gain control, while no material conflict appears between their accounts. The event affected users of a cross-chain bridge rather than a listed spot token covered by the supplied market snapshot. It also illustrates that the security of a protocol interface can depend on systems outside the protocol itself: compromising the domain used to distribute updates or direct user interaction can expose users even if the underlying blockchain code remains unchanged. The broader market backdrop was cautious during the report. Total crypto market capitalization stood at $2.52 trillion, the overall market was broadly down, and Bitcoin was down 1.10% over 24 hours. The Fear & Greed index registered 29, placing sentiment in Fear. No coin from the supplied list was specifically named in connection with the Across incident, so there is no attributable asset-level price move to report. Follow-up attention centers on the reimbursement process, any additional loss estimates and further disclosures about the domain-security response.