Across Protocol Domain Hijacked in Namecheap Social Engineering Attack

This incident shifts attention from smart contract exploits to the registrar layer, where a social engineering attack can hand attackers control of a trusted frontend without touching protocol code. The rapid takedown and Cloudflare's DNS revocation limited the window, but the call to revoke approvals signals that some users interacted with a compromised interface. The open question is whether registrar-level social engineering becomes a recurring vector for DeFi frontends, and how quickly teams can detect and neutralize domain takeovers before wallet-draining approvals are signed.