Aave user loses $305,000 after Across Protocol website hijack
A Bitquery investigation estimates that the Nov. 10 hijack of Across Protocol’s website led to about $401,900 in losses across nine wallets on five blockchains. The largest victim lost roughly $305,000 in aWETH deposited in Aave after signing a permit that allowed the attacker to transfer the tokens. About 115.23 aWETH went to the attacker’s wallet and 28.81 to a fee wallet. Bitquery also added a separate 26.38 ETH sweep, worth about $54,000 at the time, to its revised tally. Across said its domain was compromised through social engineering involving registrar Namecheap; it regained control the next day and pledged to reimburse affected users and publish a postmortem. The investigation links the transfers to the incident through timing and wallet data, while noting that blockchain records cannot confirm which website victims visited.
