Across Protocol has asked all users to refrain from accessing its web application or connecting crypto wallets on Tuesday local time. The emergency measure comes as developers investigate a potential security incident targeting the cross-chain bridge protocol.
The warning came with strict instructions: asset holders are advised not to sign any new transactions. Across developers also requested users to reject all smart contract approval requests until the next official announcement is made.
Attack Vector via Web Interface
Based on initial indications, the security incident is suspected of involving a compromise of the protocol’s website interface or official domain. Through a redirect on the web frontend, user asset balances were drained as they interacted with or connected their wallets to the bridge system.
The breach of the web interface leaves users visiting the official URL at risk of losing funds. Suspicions of a domain compromise emerged after several wallet holders found their assets vanished instantly upon completing interactions on the site.
Wave of Drained Wallets Reported on X
The fallout from the incident began surfacing through reports shared by victims on social media platform X. Several users confirmed sudden losses of funds after using Across’s cross-chain bridge service.
One victim reported losing $9,000 worth of USDC stablecoin holdings. Another user shared similar details after their balance of 7,053 USDT0 disappeared across seven consecutive transactions on the Plasma blockchain network following bridge interactions.
A third victim also confirmed their wallet was completely wiped out after using the bridge feature multiple times. Detecting anomalies during the transfer process, the victim suspected that the protocol’s official website domain was hijacked by malicious actors to siphon user assets.
How Developers Are Tracing the Transaction Trail
Responding to the string of victim reports, the Across Protocol development team moved to gather technical evidence. The developers requested all affected users to submit full transaction details to assist in tracking the flow of stolen funds.
Tracing transaction evidence aims to uncover the root cause of the exploit while preventing broader losses. For crypto bridge users, refraining from signing smart contract approvals remains the safest measure until the technical investigation concludes.
Reported by Cointelegraph.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
