A Website Hack Can Be Just as Dangerous as a Smart Contract Exploit
The Across Protocol incident is a reminder that crypto security extends well beyond blockchain code. Hackers reportedly took control of the project's domain through social engineering and redirected visitors to a phishing website. Users could have lost funds despite the underlying bridge contracts remaining untouched. This is a major weakness in how people assess crypto security. A project can have audited smart contracts and still expose users through its website, domain registrar or other infrastructure. Should security audits also cover a crypto project's entire online infrastructure?
