Across Protocol warns users to avoid app amid reports of drained wallets
Source Entity
Cointelegraph by Nate Kostar
Across Protocol and Initia have both suffered major security breaches this week, resulting in unauthorized asset withdrawals. Across resolved a domain hijacking incident, while Initia is managing the fallout of a cloud infrastructure compromise.
Security Breaches Rock Cross-Chain Infrastructure
Recent reports confirm a turbulent week for blockchain infrastructure providers, with both Across Protocol and Initia falling victim to significant security exploits. These incidents underscore the persistent vulnerabilities inherent in cross-chain bridging and cloud-dependent blockchain architectures. As decentralized finance (DeFi) continues to evolve, the reliance on centralized domain registrars and cloud service providers remains a critical point of failure that malicious actors are increasingly targeting.
The Across Protocol Domain Hijack
Across Protocol, a prominent cross-chain bridge, faced a severe disruption when hackers successfully hijacked its domain, across.to. The breach was executed via a social engineering attack targeting the domain registrar, Namecheap. By gaining unauthorized control of the domain, attackers were able to redirect unsuspecting users to a sophisticated phishing site. This resulted in immediate financial losses for users, with reports of thousands of dollars in USDC and USDT being drained through fraudulent transactions. The protocol’s swift warning to users to disconnect wallets saved many from potential exposure, and the subsequent recovery of the domain—facilitated by Namecheap leadership—highlights the importance of rapid incident response in the Web3 ecosystem.
The Anatomy of the Initia Exploit
Simultaneously, the Layer-1 blockchain network Initia confirmed its second major security incident in under three weeks. In this instance, the attack vector was technical rather than social; attackers utilized a compromised Google Cloud Platform key to perform a command injection. This breach allowed the perpetrators to access sensitive environment variables, eventually compromising Initia’s GitHub and cloud accounts. The attackers leveraged this access to target Anvil, a platform hosting rollups, enabling them to validate fraudulent Inter-Blockchain Communication (IBC) withdrawals and siphon $3.27 million in assets.
Broader Implications for Decentralized Security
These events serve as a stark reminder that even robust protocols are only as secure as their weakest administrative link. While blockchain technology is designed to be immutable and trustless, the 'off-chain' infrastructure—such as domain registrars and cloud hosting services—remains susceptible to traditional cybersecurity threats. The fact that Initia suffered two exploits in such a short window suggests that systemic security audits and credential management practices must be significantly tightened to maintain user trust.
Moving Toward Recovery and Resilience
In the wake of these incidents, Across Protocol has committed to making all affected users whole, promising a full post-mortem analysis. Initia has managed to freeze approximately $2.16 million of the stolen assets, though the remaining funds represent a significant loss. These developments will likely accelerate the industry's shift toward more decentralized domain management and more rigorous multi-factor authentication protocols for cloud infrastructure access. As the sector matures, the ability of these projects to transparently address vulnerabilities and compensate users will be the primary metric for their long-term viability.
Multiple Citing Sources