Across Protocol's website was hijacked — and this was not a smart-contract hack. At around 18:45 UTC, a social-engineering attack on Namecheap, Across's domain registrar, gave a bad actor control of the Across domain. Within 15 minutes, the team was alerted and moved to shut the site down. SEAL911 flagged the domain as a phishing site with major wallets, and Cloudflare marked it at risk — before Across pulled its DNS records. The phishing site is now down, but the frontend and API are still offline while the team works to secure the domain. The warning is simple: do not visit the app, connect your wallet, or sign any transaction there until further notice. If you visited in the last few hours and think you were affected, Across says to reach out by DM — and to revoke any permissions you granted. Across also says affected users will be made whole. The catch: this was not a bug in the code. Across says its domain was locked down with best-in-class security — and the takeover still happened through the registrar. Still, the direction is unmistakable. A bridge can be secure and still get hit at the domain layer — the weakest link was not the protocol, it was the registrar. Bitcoin is trading near $73,710, down about 1.7% in 24 hours.