Cross-chain protocol Across took its frontend and API offline after attackers gained control of its domain through a social-engineering attack targeting registrar Namecheap at about 6:45 p.m. UTC on Nov. 10, or 2:45 a.m. Beijing time on Nov. 11. The team received an alert and began shutting down its website within 15 minutes. SEAL911 marked across.to as a phishing site, after which Cloudflare revoked the domain’s DNS records and made it inaccessible. Users who visited the site before the shutdown may have been affected, while third-party integrations and API users were not impacted. Across said affected users will be compensated and advised users to revoke related authorizations through revoke.cash. Users reported losses including $9,000 in USDC and 7,053 USDT0 across seven transactions on Plasma, although Cointelegraph said it had not independently verified the claims. Across had earlier warned users not to visit the app, connect a cryptocurrency wallet, or sign transactions or approvals, and said it sent suspected victims transaction histories. Separately, NEAR AI reported that a remote code execution vulnerability in the open-source SGLang inference engine exposed information on approximately 100 users and 18 AI agents; it patched the vulnerability, revoked exposed credentials and restored cloud access.