Across Protocol warns users to avoid app amid reports of drained wallets

Abstract:Across Protocol has warned users against interacting with its app as it investigates a possible domain compromise amid reports of wallet draining and lost funds.

Crosschain bridging protocol Across, which allows users to transfer digital assets between Ethereum and other blockchain networks, warned users Tuesday not to access its app or connect their wallets while it investigates a potential security incident.

In a Tuesday X post, Across advised users against signing transactions or approvals until further notice, without specifying the nature of the incident or whether its website had been compromised.

Source: Across Protocol

On X, one user claimed to have lost $9,000 in USDC, while another reported losing 7,053 USDT0 across seven transactions on the Plasma blockchain.

A third user said their wallet was drained after using the bridge several times, alleging that the website had been compromised. Across asked the users for transaction details to investigate their reports.

Cointelegraph has not independently verified the reports. Across Protocol did not immediately respond to Cointelegraphs request for more details.

Across Protocol responds to user reporting $9,000 USDC loss. Source: X user bilm01NEAR AI discloses separate security breach

In a separate security incident, NEAR AI disclosed Monday that attackers exploited a vulnerability in its AI infrastructure, exposing account details belonging to approximately 100 users and data from 18 AI agents.

According to a Nov. 9 incident report, attackers exploited a remote code execution vulnerability in SGLang, an open-source AI inference engine, to gain access to an internal server and other infrastructure. The compromised data included user names, email addresses, agent chat histories, settings and logs, while two customers had API keys exposed.

NEAR AI said attackers may also have observed requests processed on the compromised server, including those running in confidential mode. The company said it had patched the vulnerability, revoked exposed credentials and restored access to its cloud services.

Disclaimer

The views in this article only represent the author's personal views, and do not constitute investment advice on this platform. This platform does not guarantee the accuracy, completeness and timeliness of the information in the article, and will not be liable for any loss caused by the use of or reliance on the information in the article.
Previous Post

CFTC Reportedly Warns Kalshi of Charges Over Prediction Market Launches

Next

Why Would China Send a Spy to Nvidia CEO Jensen Huang?