Wallet-drain drama sends Across users packing while NEAR AI patches another breach 🪳

Crosschain bridging protocol Across warned users on Tuesday not to access its app or connect their wallets while it investigated a potential security incident, asking users not to sign transactions or approvals until further notice. The protocol did not specify the nature of the incident or whether its website had been compromised.

Several users reported losses on social media. One user, bilm01, claimed to have lost $9,000 in USDC, while another reported losing 7,053 USDT0 across seven transactions on the Plasma blockchain. A third user said their wallet was drained after using the bridge several times and alleged that the website had been compromised. Across asked users for transaction details, but the reports have not been independently verified. Across Protocol did not immediately respond to a request for more information.

In a separate incident disclosed Monday, NEAR AI said attackers had exploited a vulnerability in its AI infrastructure, exposing account details belonging to approximately 100 users and data from 18 AI agents. According to a Nov. 9 incident report, attackers exploited a remote code execution vulnerability in SGLang, an open-source AI inference engine, to reach an internal server and other infrastructure.

The compromised data included user names, email addresses, agent chat histories, settings and logs, while two customers had API keys exposed. NEAR AI said attackers may also have observed requests processed on the compromised server, including requests running in confidential mode. The company said it had patched the vulnerability, revoked exposed credentials and restored access to its cloud services.