Across Protocol restores website after hackers hijack domain
Source Entity
Cointelegraph by Felix Ng
Major blockchain platforms Across Protocol and Initia have suffered significant security breaches this week. Across Protocol is restoring services after a domain hijacking, while Initia faces its second exploit in three weeks involving compromised cloud credentials.
Blockchain Security Crisis: Across Protocol and Initia Targeted
The decentralized finance (DeFi) ecosystem is currently grappling with a wave of high-profile security incidents. Within a span of days, both the cross-chain bridge Across Protocol and the Layer-1 blockchain network Initia have fallen victim to sophisticated cyberattacks. These events highlight the persistent vulnerabilities within the infrastructure of digital asset platforms, where a single point of failure—whether in domain management or cloud infrastructure—can lead to significant financial loss for users.
Across Protocol's Domain Hijacking
Across Protocol recently confirmed that its domain, across.to, was compromised in a social engineering attack targeting its registrar, Namecheap. By gaining control of the domain, attackers successfully redirected users to a fraudulent phishing site. This method bypasses the inherent security of the blockchain itself by targeting the user interface, effectively deceiving victims into signing malicious transactions. The platform has since regained control with the assistance of Namecheap's founder and has pledged to reimburse affected users, though the total number of victims and the scale of the theft remain under investigation.
Initia's Infrastructure Breach
Simultaneously, the Layer-1 network Initia reported its second exploit in less than three weeks. In this instance, attackers utilized a command injection attack stemming from compromised Google Cloud Platform credentials. This breach allowed unauthorized access to Initia’s GitHub and cloud environments, ultimately enabling the attacker to validate fraudulent Inter-Blockchain Communication (IBC) withdrawals. The incident resulted in $3.27 million in stolen assets, with the network forced to halt operations to freeze approximately $2.16 million of the remaining funds.
The Vulnerability of Centralized Dependencies
Both incidents underscore a critical trend in the crypto sector: the reliance on centralized third-party services. Despite the decentralized nature of the underlying protocols, the operational layer often relies on traditional web infrastructure like domain registrars and cloud service providers. When these centralized hubs are compromised through social engineering or credential leaks, the decentralization of the blockchain becomes secondary to the vulnerability of the management interface.
Historical Context and Future Trends
Historically, the DeFi space has struggled with the 'oracle problem' and bridge security, but these recent attacks shift the focus toward operational security (OpSec). The move toward more robust infrastructure, such as hardware security modules (HSMs) and multi-signature requirements for cloud access, will likely become an industry standard. As platforms continue to iterate, the pressure to secure the entire supply chain—from domain registration to cloud environment variables—is mounting.
Conclusion
These breaches serve as a stark reminder of the risks inherent in the current state of blockchain technology. While Across Protocol works to make its users whole and Initia attempts to recover from its second major security failure, the broader industry is forced to reckon with the fragility of its administrative layers. Moving forward, platforms must adopt a zero-trust architecture that extends beyond the smart contract code to the very tools used to host and manage their services.
Multiple Citing Sources