exploit
Across Protocol domain hijacked via Namecheap social engineering, ~$350k drained
Attackers took across.to at 18:45 UTC on Nov 10 via Namecheap, served a token-approval phishing page, and drained wallets on six chains before the team pulled the site 15 min later.