Across's domain name was hijacked; the company has promised to compensate affected users.

Namecheap, the domain registrar for Across, suffered a social engineering attack that resulted in the loss of control of the Across domain. The team received an alert around 02:45 on November 11th and shut down the website. Currently, across.to has been flagged as a phishing site by SEAL 911, and Cloudflare has revoked the domain's DNS records. Some users who previously visited across.to may be affected; third-party integration and API users are unaffected. Across will compensate all affected users and recommends that users revoke their authorizations via revoke.cash. The Across frontend and API will remain closed until the domain is securely restored.