@NEAR_Intents temporarily suspended operations on October 1 after identifying a vulnerability in its smart contract infrastructure that resulted in the loss of approximately $3.8 million. Wha
@NEAR_Intents temporarily suspended operations on October 1 after identifying a vulnerability in its smart contract infrastructure that resulted in the loss of approximately $3.8 million.
NEAR Intents released a security notice confirming it had been attacked. Preliminary investigations indicate the vulnerability originated from a defect in the interaction between the Omni deposit and withdrawal infrastructure and contracts.
On-chain investigator ZachXBT reported that multiple abnormal fund outflows were detected from NEAR Intents' BSC hot wallet. The stolen funds were transferred to KuCoin and further bridged to the Bitcoin network, with the total amount involved exceeding $3.8 million.
The contract vulnerability has been fixed, core services were expected to be restored within one hour, and the team committed to fully compensating affected assets. Management pledged to refund all impacted user balances in full using treasury funds.
NEAR Intents also stated that deposit and withdrawal services on multiple public chains, including BSC, Polygon, and TON, would be additionally suspended for approximately 12 hours. Native swap execution and accounts on near.com were set to resume more quickly, while the extended bridge suspension gives the team additional time to audit cross-chain gateway security.
The incident has been reported to authorities, and on-chain tracking is underway.
The incident comes just days after NEAR Intents drew wider attention for blocking more than $50 million in attempted transfers linked to the high-profile Bitget hack. NEAR Intents said it blocked more than $50 million in attempted transfers linked to the Bitget hack, positioning the protocol as an active participant in combating illicit crypto flows. The latest exploit, targeting the protocol itself, is a notable reversal and will likely prompt scrutiny of its internal security posture.
Sources:ChainCatcher: NEAR Intents confirmed it was attacked, funds exceeding $3.8 millionTechFlow: NEAR Intents Confirms Attack, Involving Over $3.8 MillionCoinTelegraph: NEAR Intents says it blocked $50M tied to Bitget hackers
