Learn · 2026-11-10

Across Protocol App Warning: What Holders Should Do Now

Across Protocol itself has told users not to access its app, connect wallets or sign transactions or approvals until further notice while it investigates a potential security incident affecting its domain. Until Across says otherwise through its official channels, the cautious answer is to stay away from the app and review what your wallet has already approved.

This guide was written on 2026-11-11. The situation may change, so check official channels.

BOTLAB is not affiliated with Across Protocol, Cointelegraph, The Defiant, or any other company named here. This is general information drawn only from the reports linked below.

What is confirmed so far

There are two reports, and they say different amounts.

What Across said

Across warned users on X not to access its app or connect their wallets while it investigates a potential security incident, according to Cointelegraph.
The same report says Across advised users not to sign transactions or approvals until further notice. Across did not say what the incident was or whether its website had been compromised (Cointelegraph).
The Defiant describes it as a domain issue. It notes that the alert does not establish whether Across's smart contracts or bridging operations are affected.

What users reported

Cointelegraph says users on X reported losses. One user claimed $9,000 in USDC. Another reported 7,053 USDT0 lost across seven transactions on the Plasma blockchain. A third said their wallet was drained after using the bridge several times and alleged that the website had been compromised.
Cointelegraph says it has not independently verified these reports. Across asked the users for transaction details so it could investigate.
Across did not immediately respond to Cointelegraph's request for more details.

Where the sources are silent

Neither source says:

how many users are affected or the total amount involved,
who is responsible,
whether funds can be recovered,
when the app will be safe to use again.

Treat any claim on those points as unconfirmed unless it comes from Across's own official channels.

Check the timing first

The sources give no deadline, block height or reopening date. Across's guidance is open-ended: avoid the app "until further notice." No action has to happen by a certain time. Be wary of anyone who says you must "act now" before a cut-off.

The reports are recent. Cointelegraph's article is dated Nov 10, 2026, and both sources were collected in the early hours of Nov 11, 2026 (UTC). A follow-up statement from Across may already exist, so check its official account before you assume the warning still applies or has been lifted.

Who is and is not affected

The sources do not clearly say who is safe.

The reports so far come from users who interacted with the Across website/app. One user reported losses on the Plasma chain (Cointelegraph).
The Defiant points out that the alert does not establish whether the smart contracts or bridging operations themselves are affected. That is neither a confirmation nor a denial.
Cointelegraph's article also mentions a separate incident at NEAR AI, where attackers exploited a vulnerability in its AI infrastructure. The article presents this as unrelated to Across, and nothing in the sources links the two.

If you never used the Across app, the reports do not describe a direct effect on you. They also do not rule one out, so watch official updates.

Practical steps to check your own position

These are general safety steps. They are not a fix for the incident, and they cannot reverse anything that has already happened.

1. Stop interacting with the app

Do not open the Across website, connect your wallet or sign anything there. This is exactly what Across asked for. Close any open tabs for the app. Do not follow links to "updated" or "safe" versions of the site posted by strangers.

2. Get updates only from official channels

Follow Across's verified official account and its official documentation. Reach them by typing the address yourself or using a bookmark you saved before the incident. Do not use links in replies, DMs or search ads. During domain incidents, impostor accounts often copy the real one.

3. Look at your wallet on a public block explorer

Open the official block explorer for each chain you bridged on, again by typing the address yourself. Paste your public wallet address and check:

recent outgoing transactions you do not recognise,
the time of each transaction compared with when you used the app,
which contract addresses received your tokens.

You never need to connect a wallet or sign anything just to view a public address.

4. Review token approvals

Many wallet drains use a token approval, which is permission you gave a contract to move your tokens. Several major block explorers have a token approval checker that lists the approvals your address has granted.

Look for approvals you do not recognise, or approvals granted while you were using the app recently.
Removing an approval is itself a transaction you sign, so only do it through a tool you reached independently and trust.
Never revoke through a link someone sent you.

5. If you think you were affected

Write down the transaction hashes, chains, times and amounts from the explorer.
Report them only through Across's official channels. Across asked affected users for transaction details (Cointelegraph).
If remaining funds are in a wallet you believe is exposed, consider whether to use a new wallet in the future. That is a personal security decision, and no one can make it for you remotely.

6. See what is still at your address

If you want a plain overview of what currently sits at a public address, Scan a wallet free. StuckScan is read-only: no wallet connection, no signing, and it never asks for a seed phrase. It shows what is in the wallet, staked, locked, pending or possibly stuck, with on-chain proof.

It does not check bridges yet, and it covers most DeFi only for Aave v3. It cannot tell you what happened inside the Across bridge or whether your bridge transfer is affected.

Watch out for scams

Security incidents attract follow-up scams quickly. Expect fake support accounts, fake "refund portals" and fake "recovery services."

Nobody legitimate will ever ask for your seed phrase. Not Across, not a wallet provider, not a "recovery agent." Anyone who asks for it is trying to take your funds.
No legitimate party charges a fee to unlock or recover funds. Requests for an upfront "gas fee," "release fee" or "verification deposit" are a classic scam.
Be careful with DMs that offer help, even when the account looks official. Real projects post announcements publicly.
Do not sign "claim," "compensation" or "verification" transactions from links you were sent. Signing on a malicious site is how many drains happen.
If someone promises recovery, treat it as a red flag. The sources say nothing about recovery.

FAQ

Is the Across Protocol app safe to use right now?

According to Cointelegraph, Across itself told users not to access the app, connect wallets or sign transactions or approvals until further notice. Wait for an official update from Across before using it.

Are Across's smart contracts compromised?

The sources do not say. The Defiant notes that the alert does not establish whether the smart contracts or bridging operations are affected. Treat this as unknown, not as confirmed safe or confirmed broken.

How much was taken and who did it?

Individual users reported specific amounts, but Cointelegraph has not verified them. Neither source gives a total or names anyone responsible.

Someone messaged me offering to recover my funds. Should I reply?

No. Unsolicited recovery offers, requests for your seed phrase, and fees to "unlock" funds are hallmarks of scams. Report losses only through Across's official channels.

Key takeaways

Across told users to avoid its app and not to connect wallets or sign transactions or approvals until further notice.
The cause, scale and whether contracts are affected are not confirmed in the sources. User loss reports are unverified.
There is no deadline, so ignore anyone pressuring you to act fast.
Check your public address and token approvals on an official block explorer you reach yourself.
Never share your seed phrase and never pay a fee to "recover" funds.
BOTLAB is not affiliated with Across Protocol or the news outlets cited.

General information, not financial advice. Crypto trading can lose money, including all capital. Check the official docs before you move funds.

Want these checks run on your own strategy? See the strategy and backtest audit.

More guides

Not sure where your crypto is? Paste a public address and see what is staked, locked, pending or ready to claim on 20 chains. Free and read-only, with no wallet connection.
Scan a wallet free