Key takeaways
- Across, a bridge for moving crypto between blockchains, posted an alert on its verified X account at 2:05 PM ET on November 10, 2026: it is looking into a problem with the Across domain and asked people to keep away from the app, not link a wallet and not approve anything on it for now.
- Across hasn't said what went wrong or whether anything beyond its website is affected. Several people replied to Across's alert on X saying their wallets had been drained, and Across answered that it was contacting them privately. Across hasn't confirmed those reports, and Cointelegraph said it had not independently verified them.
- What to do: stay off the Across website until it posts an all-clear, check and revoke token approvals if you've used it recently, and ignore anyone who contacts you offering refunds or recovery.
If you use the Across crypto bridge, stay off its website for now. On the afternoon of November 10, 2026, Across told users not to visit its app, connect a wallet or sign anything there while it looks into a problem with its web address. Here's what's confirmed, what isn't yet, and what to do if you used it today.
What happened
- 2:05 PM ET, November 10: Across posted an alert on its verified X account. It said it was "investigating an issue with the Across domain" and told users: "Do NOT visit the app, connect your wallet, or sign any transaction or approval there until further notice." It promised more updates.
- Afterwards: people began replying on X that their wallets had been emptied. According to Cointelegraph, one user said they lost $9,000 in USDC and another reported losing 7,053 USDT0 in seven transactions on the Plasma blockchain. Across answered several of them on X saying it had messaged them privately.
- What's not known yet: Across hasn't said what the domain problem is, how many people lost money, whether anything beyond the website is involved, or whether apps that use Across behind the scenes are affected. The Defiant pointed out that the alert didn't say whether Across's smart contracts or bridging were affected, and Cointelegraph said it had not independently verified the users' loss reports.
What Across is, in plain words
A bridge lets you move crypto from one blockchain to another, for example stablecoins from Ethereum to a cheaper network. Across is one of the bigger ones: its own X profile claims more than $40 billion moved and over 5 million wallets. You use it through a website, connect your wallet, and approve the transfer.
That website is the weak point in a "domain" problem. In general, if attackers take over a project's web address or the code its site loads, they can show a perfect copy of the real app that asks you to approve something harmful. One signature can hand a stranger permission to move your tokens. We don't know yet whether that is what happened here; Across hasn't said. But that general risk is why "don't connect, don't sign" is the right move.
What to do now
- Don't open the Across app until Across posts an all-clear on its verified X account. Don't trust links in replies, DMs or search ads that claim to be a "fixed" version.
- If you've used Across recently, check your approvals. Connect your wallet to a trusted approval checker such as Revoke.cash, or the approval tool on a block explorer, and remove any approval you don't recognize. Type the address yourself: scammers post fake "revoke" links in reply threads after incidents like this. Our guide to phishing and wallet drainers walks through it.
- If you signed something odd or money already left, treat that wallet as unsafe. Move what's left to a brand-new wallet with a new seed phrase, and stop using the old one.
- Write down what happened: your wallet address, the time, and the transaction IDs. Cointelegraph reported that Across asked affected users for transaction details.
- Ignore refund and recovery offers. Anyone who asks for your seed phrase or an upfront fee to "recover" your crypto is running a scam. See recovery scams, and run any suspicious message through our Scam Check.
The takeaway
Across's own warning is confirmed; the cause and the size of any losses are not. Until the company says it's safe, the simplest protection is not to use its website at all. We'll update this post when Across shares more. This is education, not financial advice, and reflects what was public on the afternoon of November 10, 2026.
Frequently asked questions
Were Across's smart contracts hacked?
Nobody has said so. Across's alert talks only about an issue with its domain, meaning its website address. The Defiant noted that the alert didn't say whether smart contracts or bridging were affected, and Across hadn't named a cause when we published.
I used Across weeks ago. Am I at risk?
Possibly. Most reports surfaced on November 10, but Across hasn't said when the problem started or who is affected. Any token approval you gave a website stays active until you remove it, so review your approvals even if you used Across before today, and revoke the ones you don't need.
Someone from Across messaged me about a refund. Is it real?
Be very careful. Scammers copy company names and contact people right after an incident like this. Never share your seed phrase, never sign a transaction a stranger sends you, and never pay a fee to get funds back. Official replies come only from @AcrossProtocol, and accounts offering "recovery" services are already showing up in its reply threads. Check Across's verified X account for official updates.
Sources
- Across alert: investigating an issue with the Across domain (November 10, 2026) (opens in a new tab) — Across on X
- Across reply to a user reporting a loss (November 10, 2026) (opens in a new tab) — Across on X
- Across Urges Users to Avoid App Over Domain Issue (opens in a new tab) — The Defiant
- Across Protocol warns users to avoid app amid reports of drained wallets (opens in a new tab) — Cointelegraph
Published November 10, 2026 by Dave McNaught. Educational content, not financial, legal or tax advice. Spot an error? Request a correction.
Dave McNaught
Dave McNaught has worked in IT since 1999 and founded All Business Technologies (ABT) in 2003, a Boston-area firm providing Managed IT, Cybersecurity, Managed AI, Web Design and App Development. He publishes The Crypto Guide.