TREE NEWS update: Across Protocol said its website is back under its control after an attacker obtained its domain through social engineering at Namecheap, and that affected users will be made whole. A security firm’s loss estimate for the incident has not been confirmed by the protocol.
Across Protocol Restores Site After Namecheap Social Engineering Attack
The recovery matters less than the vector: the breach came through a registrar's human layer, not a smart contract flaw, which puts domain-level custody in the same risk bucket as code for any protocol with a public front end. The protocol's commitment to make affected users whole shifts the focus to how that is funded and whether the unconfirmed loss estimate holds up. Whether registrar-level social engineering becomes a recurring pattern across DeFi front ends is the open question worth watching.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.