# Attackers Took Over Across Protocol's Domain Through Its Registrar and Took About $402,000 From Users

The largest single loss was about $305,000 taken from one user's Aave deposit, and Across has pledged to repay victims although its smart contracts were never compromised.

- Published: 2026-11-13T05:45:42.603Z
- Canonical: https://polylog.news/crypto/2026-11-13/attackers-took-over-across-protocol-s-domain-through-its-reg
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [CryptoSlate](https://cryptoslate.com/across-protocol-website-attack-reached-an-aave-deposit-new-402000-loss-trace-shows/), [The Crypto Times](https://www.cryptotimes.io/2026/11/11/across-protocol-domain-hijacked-via-namecheap-social-engineering-attack-users-to-be-made-whole/), [FinanceFeeds](https://financefeeds.com/across-restores-domain-after-350k-phishing-attack/), [KuCoin News](https://www.kucoin.com/news/flash/across-website-domain-hijacked-frontend-and-api-suspended-full-compensation-promised)

Attackers took control of across.to, the web domain of the cross-chain bridge Across Protocol, at about 18:45 UTC on November 10, FinanceFeeds reported. Across says they did it by deceiving staff at its domain registrar, Namecheap, The Cryp…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-11-13/attackers-took-over-across-protocol-s-domain-through-its-reg (subscription information: https://polylog.news/pricing).