Across Investigates Domain Incident After Reported Wallet Losses

After one user reported a $9,000 USDC loss and another 7,053 USDT0 across seven Plasma blockchain transactions, Across Protocol told users Tuesday to avoid its app while it investigated a possible domain security incident.

Across did not specify the nature of the incident or confirm that its website had been compromised. The protocol asked affected users for "transaction details" to investigate the reported losses.

What do the reported losses show?

One user claimed to have lost $9,000 in USD Coin (USDC). A second reported losing 7,053 USDT0 in seven transactions on the Plasma blockchain. A third said their wallet was drained after using the bridge several times and alleged that the website had been compromised.

The three accounts do not amount to a verified aggregate loss. Across disclosed no combined total, and the third account included no amount; the $9,000 and 7,053 figures are individual claims, not a confirmed measure of protocol-wide losses.

The two quantified reports also use different units. The $9,000 account states a dollar value, while the other account counts 7,053 USDT0 without giving a dollar valuation. Across has not converted the token quantity into dollars or said whether either claim has been matched to on-chain activity.

Is a website compromise confirmed?

No. Across described a possible domain security incident but did not provide either the incident's nature or confirmation of the website-compromise allegation. That distinction leaves the cause unverified and prevents the three reports from establishing that the bridge contracts or underlying networks failed.

Operationally, the response remains broad at the user interface: the protocol directed people away from the app and away from wallet connections or signatures. The instruction therefore blocks new transfers initiated through that interface while the reported cause remains unresolved.

What has Across asked users to do?

Across told users to "stay away from its app" and avoid connecting wallets or signing transactions. It also warned against signing transaction approvals until further notice, adding approvals to the list of actions users should suspend while the review continues.

Following that instruction means users would not initiate a new transfer through the app because the app is the service the protocol asked them to avoid. The instruction remains open-ended: no end date, investigation timetable or restoration target was provided.

Which networks and assets are involved?

Across operates a crosschain bridge that lets users move digital assets between Ethereum and other blockchain networks. The reported 7,053 USDT0 loss occurred on Plasma in seven transactions. No blockchain was identified for the $9,000 USDC claim.

Plasma is therefore the only network named in a quantified account, while Ethereum appears in the description of Across's service rather than as an affected network. The warning did not identify USDC or USDT0 as compromised, and it did not attribute the losses to a token contract.

What happens next?

The request for transaction details is the only next step Across has disclosed. Until its review identifies a cause, users remain subject to the no-connect, no-sign instruction. Any change to app access will depend on Across lifting or extending the warning, and the protocol has set no deadline.

The next checkpoint is Across's identification of the domain issue and any lift or extension of the app warning. Without that update, the three loss claims will remain unverified and the protocol will have provided no resumption date.