TLDR
Cross-chain swap service NEAR Intents temporarily halted operations on 11 networks after a smart contract bug led to about $3.8 million in losses, with full user reimbursement pledged.
- NEAR Intents paused services and near.com after an Omni integration bug was exploited, causing an estimated $3.8 million loss, and says affected users will be fully compensated.
- Deposits and withdrawals on 11 connected networks were halted for repair, while core swapping services are expected to resume quickly and users balances remain intact at the application level.
- The incident underscores how cross-chain infrastructure remains a high-value attack surface, so the key things to watch are NEAR Intents post-mortem, security upgrades, and how other bridges respond.
Deep Dive
1. Exploit And Service Halt
Reports say NEAR Intents suspended its services and near.com after a flaw in how Omnis deposit and withdrawal infrastructure interacted with the NEAR Intents smart contract was exploited, leading to a preliminary loss of about $3.8 million. The team states the contract vulnerability has been patched and core operations are expected to restart shortly, with a commitment to reimburse affected users in full, according to multiple summaries of the incident from outlets such as TokenPost and Bitcoin.com.
Investigators including ZachXBT flagged irregular outflows from a BSC hot wallet, with funds routed through KuCoin and then bridged to Bitcoin, which NEAR Intents has reported to law enforcement while working with analytics firms to trace and recover funds.
The exploit hit NEAR Intents infrastructure rather than user wallets directly, but it forced a temporary shutdown to prevent further loss and to cleanly repair the affected systems.
2. Impact On Users And Networks
The halt focuses on deposits and withdrawals across 11 networks integrated via Omni: Binance Smart Chain (BSC), Polygon, TON, ethereum/">Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll and Plasma, which are expected to remain paused for about 12 hours while infrastructure fixes are applied. Users holding assets from those networks inside NEAR Intents (including via HOT Wallet or near.com) are expected to retain access to swaps once the core service resumes, even while direct deposits and withdrawals remain temporarily disabled.
The team has publicly pledged full compensation for affected users and framed the suspension as a security measure during repair work rather than a permanent loss of access to funds.
If you are a NEAR Intents user, the immediate risk is operational (delayed deposits/withdrawals), not the permanent loss of assets, but you should monitor official channels for exact restoration timelines.
3. Broader Cross-Chain Security Risk
This incident fits a larger pattern where bridges and cross-chain services are frequent targets. Separate tracking of 2026 exploits notes hundreds of crypto hacking incidents with dozens involving bridges or cross-chain infrastructure, contributing to losses approaching $2 billion across the year.
Because these services sit between multiple chains and often hold pooled liquidity, a single bug or misconfigured integration can propagate across networks and impact users far beyond one ecosystem. The planned detailed incident report and any changes NEAR Intents makes to its auditing, monitoring and integration design will be important signals for how cross-chain security practices evolve.
Cross-chain tools remain powerful but risky; users and protocols should treat them as critical infrastructure, scrutinize their security disclosures, and diversify routing rather than relying on a single service.
Conclusion
NEAR Intents decision to halt services after a $3.8 million exploit highlights both the fragility and importance of cross-chain infrastructure in modern crypto markets. Short-term, the main effects are paused deposits and withdrawals and operational disruption; longer term, the value lies in how thoroughly the team explains the root cause and hardens its systems. As bridges and routing layers keep growing in importance, their security responses after incidents like this will shape how safely liquidity can move across chains.
