Across Protocol Restores Website After Domain Hijack

The Across incident shifts attention from smart contract risk to the operational layer, where a registrar compromise can turn a trusted URL into a phishing vector without touching on-chain code. For bridge users, the lesson is that domain-level security is now a live counterparty risk, and the absence of disclosure on compromise duration or affected users leaves the actual exposure unclear. Whether Across or Namecheap provides that detail, and whether registrar-level social engineering becomes a recurring pattern for DeFi front ends, is the open question.