According to a statement retweeted by Changpeng Zhao, a social engineering attack targeting domain registrar Namecheap occurred at approximately 18:45 UTC, allowing the attacker to gain control of the Across domain. The project team stated that they subsequently collaborated with SEAL911 and Cloudflare to flag the risk and pull down DNS records. At the time of posting, the phishing site was inaccessible, and the frontend and APIs will remain disabled until domain security is fully restored. The project team noted that some visitors may have been affected during the brief window of the incident.