Across Protocol Warns Users to Avoid App Amid Reports of Drained Wallets

Across Protocol warned users Tuesday not to access its app or connect wallets as it investigates a potential security incident. According to Cointelegraph, the crosschain bridge, which enables transfers of digital assets between Ethereum and other blockchain networks, also advised users in a Tuesday post on X not to sign transactions or approvals until further notice. The protocol did not specify the nature of the incident or say whether its website had been compromised. Users on X reported losses: one claimed to have lost $9,000 in USDC, while another said they lost 7,053 USDT0 over seven transactions on the Plasma blockchain. A third user alleged their wallet was drained after using the bridge several times and said the website had been compromised. Across asked users to provide transaction details so it could investigate their reports. Cointelegraph said it had not independently verified the claims, and Across Protocol did not immediately respond to its request for further details. In a separate incident, NEAR AI disclosed Monday that attackers exploited a vulnerability in its AI infrastructure, exposing account details belonging to approximately 100 users and data from 18 AI agents. The company’s Nov. 9 incident report said attackers used a remote code execution vulnerability in SGLang, an open-source AI inference engine, to access an internal server and other infrastructure. Information exposed included user names, email addresses, AI agent chat histories, settings and logs; API keys belonging to two customers were also exposed. NEAR AI said attackers may have observed requests processed on the compromised server, including requests handled in confidential mode. The company said it had patched the vulnerability, revoked exposed credentials and restored access to its cloud services. The NEAR AI breach was described as separate from the potential security incident under investigation by Across Protocol.