Attackers hijacked the Across domain on Nov 10 and served a drainer on the real across.to for a while. Only the site was hit, the contracts and API were not touched.

It is one of six different ways wallets got hit in the last 72 hours. Each one has a single fix, and it is on the card.

Hijacked domain, iPhone 0-day with no Apple fix yet, poisoned Swarm update, LNbits hot wallet bug, fake "free TradingView Premium" and a malicious pull request aimed at Zcash wallet devs.

Save it and send it to anyone who keeps crypto on their phone.