Across Protocol site hijack drains $401,900, mostly from one Aave user
Bitquery's November 12 update puts losses from the Across Protocol website hijack at about $401,900 across nine wallets, with one Aave deposit token accounting for roughly $305,000.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- Bitquery's November 12 update estimates $401,900 in losses across nine wallets.
- About $305,000 came from a single Aave deposit token.
- The incident involved a hijack of the Across Protocol website, not a reported smart contract exploit.
- Nine wallets were affected, so one victim accounts for most of the total.
$401,900. That's what the Across Protocol website hijack has cost users, per a November 12 update from blockchain data firm Bitquery. One Aave user ate the worst of it: about $305,000, tied to a single Aave deposit token.
What we know
Nine wallets were hit, says Bitquery. Run the numbers and one wallet accounts for roughly three-quarters of the total. The other eight split the scraps.
The attack came through the website, the front end people use to talk to the protocol. That's not the same as a bug in the protocol's contracts. Our source material doesn't say how the hijack worked, who's behind it, or whether any funds have come back. So we're not guessing.
These figures are Bitquery's estimates. They could move as more wallets get traced.
Why it matters
You can do everything right on-chain and still get cleaned out. All it takes is a compromised website. Audited contracts won't save you when a hijacked page asks you to sign something nasty.
The $305,000 loss involved an Aave deposit token. So yield-bearing positions are fair game too, not just idle tokens. For anyone using bridges or DeFi apps, the fixes are boring but they work: read what you're signing, bookmark the official URLs, and park big holdings in wallets that aren't forever hooked up to dapps.
The open question is how many protocols still lean on one web front end with little defense against a takeover like this.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Alex Rivera
Alex covers crypto markets and trading, testing every platform hands-on before writing about it.
Related News
Unocoin's login suspension drags on, and the exchange has flagged ETH transfers tied to BitGo
Chainstack says an AI-powered breach exposed customer data
GitBook breach via AI agent forces key rotation for crypto docs
