DeFi exploit drains $3.8M platform pledges refunds

TLDR

Cross-chain protocol NEAR Intents was exploited for about $3.8 million, but the team has patched the bug and pledged full refunds to affected users.

1. The exploit came from a bug in NEAR Intents Omni deposit and withdrawal infrastructure interacting with its smart contract, draining roughly $3.8 million.
2. NEAR Intents paused services and deposits/withdrawals on 11 networks, then resumed core operations while promising full reimbursement and working with law enforcement.
3. The incident highlights growing cross-chain security risk and makes upcoming postmortems, reimbursement details, and KuCoin fund tracing key things to watch.

Deep Dive

1. What Happened In The Exploit

Multiple reports say NEAR Intents, a popular cross-chain trading system, suffered a security exploit that caused about $3.8 million in losses on Oct. 1, 2026. The issue was traced to a bug in how its Omni deposit and withdrawal layer interacted with a NEAR Intents smart contract, allowing unauthorized withdrawals from a BNB Chain hot wallet.

Investigators including ZachXBT reported that the stolen funds were sent to KuCoin and then bridged into Bitcoin, turning the failure into a live chase across chains rather than a static loss pool. The vulnerability on the contract side has since been patched, according to the teams statements and follow-up coverage from outlets such as CoinDesk and Decrypt.

2. Refunds And Service Recovery

NEAR Intents has pledged to compensate affected users in full and reported the incident to law enforcement while working with blockchain analytics and security firms to trace the funds. Several sources note that deposits and withdrawals involving 11 networks, including BNB Chain, Polygon, TON, ethereum/">Optimism, Avalanche, Stellar, Monad, X Layer, ADI, Scroll and Plasma, were paused while fixes were applied.

NEAR co-founder Illia Polosukhin later said NEAR Intents and the main near.com interface had resumed service, with some chains still temporarily restricted while Omni infrastructure is hardened, and emphasized that the base NEAR Protocol and other NEAR applications were not affected, as detailed in crypto.news coverage. Users are still waiting on a detailed reimbursement timeline and a full postmortem.

3. Wider Impact And What To Watch

The exploit landed just days after NEAR Intents helped block tens of millions tied to the massive Bitget exchange breach, underlining how cross-chain intent systems can sit in the middle of large flows and become attractive targets. Articles from Cointelegraph and CryptoSlate frame this as part of a rough year for DeFi and bridge-like infrastructure.

Key next signals include the public postmortem and any additional security measures, confirmation that all affected users have actually been reimbursed, and whether KuCoin or other venues help recover any of the stolen funds. For NEAR ecosystem participants, the distinction between an app-layer integration bug and core protocol security will remain important.

Conclusion

NEAR Intents 3.8 million dollar exploit shows how a single integration bug in cross-chain infrastructure can disrupt many networks at once, even when the underlying base chain remains intact. The platforms pledge to fully refund users and rapid patching limit direct user harm, but the incident reinforces that DeFi and intent-based systems are still in an experimental phase where operational security and clear recovery plans matter as much as yield or convenience.