Morning Edition · Friday, November 13, 2026Published at 12:45 AM EST · New York
The largest single loss was about $305,000 taken from one user's Aave deposit, and Across has pledged to repay victims although its smart contracts were never compromised.

Attackers took control of across.to, the web domain of the cross-chain bridge Across Protocol, at about 18:45 UTC on November 10, FinanceFeeds reported. Across says they did it by deceiving staff at its domain registrar, Namecheap, The Cryp…
Track on-chain flows, protocol shifts, stablecoins, and regulation.
The Global Intelligence Brief stays free.
Part of a tracked trend
Losses Move to Components That Worked as Designed
A growing share of DeFi losses will come not from buggy contract code but from components behaving exactly as specified — oracle forwarders, validator signature sets, governance votes and other trusted off-contract inputs — so audits and bug bounties scoped to on-chain code keep missing the failure surface, and protocols will be repeatedly forced to extend review, scope and monitoring to their privileged operational infrastructure.
Start a discussion in Townsquare.
More from this edition
Comments
0No comments yet.