Across's bridge contracts were not hit. Only users who signed permits or approvals on the fake across.to page after 18:45 UTC on 10 November are exposed.