Across Protocol Warns After Reports of Empty Wallets
The bridge protocol is investigating a possible issue with its own domain after users reported missing USDT0 and USDC. Across is warning users not to connect to or sign anything in the app for now.
Key Takeaways
- Across Protocol warned users on Tuesday not to use the app after multiple wallets were drained.
- The bridge protocol is investigating a possible security incident involving its own domain and says users should not sign anything on the site for now.
- Users reported losses of 7,053.46 USDT0 and 9,000 USDC, but Across has not confirmed a total amount.
Across Protocol warned users on Tuesday not to use the app after several people reported that their wallets had been drained. The bridge protocol is investigating a possible security incident involving its own domain and says users should not sign anything on the site for now.
Warning on X
In a post on X, the team said it is investigating a problem with the Across domain. Users should not visit the app, connect their wallet, or sign any transaction or approval until further notice. The protocol also said it will post updates once more is known.
The warning came from Across's own account. The team wants to make clear that this is an ongoing investigation and not a finished analysis. Nothing has been confirmed yet about the exact cause.
Reports of Losses
Within an hour of the warning, reports were already appearing from users who had lost funds. One user said that 7,053.46 USDT0 had disappeared from his wallet on the Plasma chain, split across seven transactions to two addresses he had not provided himself. A second user reported a loss of 9,000 USDC. These are self-reports on social media; Across has not confirmed a total amount.
A third user said the wallet was drained after using the bridge several times and suspected the website itself had been compromised. Across has not confirmed that. It is also still unclear whether the problem only affects the front end or whether something bigger is going on.
Why This Matters
For European crypto users, this incident shows how vulnerable the link between an app and a wallet can be. If the front end is compromised, a user can end up signing a malicious approval themselves, even if the underlying smart contracts have not necessarily been affected. In a year when the industry has already seen a lot of security problems, a warning like this is especially relevant for bridge users. Other incidents have also shown how quickly what looks like a small interface issue can turn into direct wallet damage, such as in a third-party hack.
Across says it can only provide more clarity once the investigation has moved further along. Until then, the advice stays the same: do not sign anything in the app and do not reconnect your wallet.