Cross-chain platform halts after $3.8M exploit

TLDR

NEAR Intents, a cross-chain trading platform tied to NEAR Protocol (NEAR), halted services after an exploit stole about $3.8 million via a smart-contract integration bug.

1. Attackers abused a flaw between NEAR Intents Omni deposit-withdrawal layer and its smart contract, draining funds and forcing a pause on deposits and withdrawals across 11 networks.
2. The team pledges full user reimbursement and rapid service restoration, but NEAR and its new ETF dropped as markets repriced infrastructure risk.
3. The exploit adds to a string of major hacks, making future audits, post-mortems and exchange responses key signals for cross-chain security.

Deep Dive

1. Exploit Mechanics And Immediate Halt

Multiple reports say about $3.8 million was stolen after a bug in how NEAR Intents Omni deposit-and-withdrawal system interacted with its smart contract allowed unauthorized withdrawals.

Investigators note funds moved from a BNB Chain hot wallet to KuCoin and then into Bitcoin, prompting NEAR Intents to halt near.com and core services while patching the contract-side vulnerability.

The project has notified law enforcement and is working with security and analytics firms, with a detailed technical post-mortem promised soon.

2. User Exposure And NEAR Price Reaction

To contain risk, NEAR Intents halted services and disabled deposits and withdrawals on 11 chains including BNB Chain, Polygon, ethereum/">Optimism and Avalanche while Omni infrastructure is repaired.

The team says affected users will be compensated in full, though timelines and exact beneficiary breakdowns are not yet public, leaving some uncertainty for active cross-chain traders.

NEAR itself, the base chain token, was not directly exploited but fell roughly 6 to 9% on the day, and Bitwises new NEAR ETF also slipped, reflecting market concern about ecosystem infrastructure risk rather than a consensus view that the L1 is broken.

3. Broader Security Trend And What To Watch

This incident landed just days after NEAR Intents helped block a $50 million laundering attempt tied to the recent Bitget exploit, underscoring how defenses and integrations can both be attack surfaces.

It also joins several hundred-million-dollar hacks this year, reinforcing that bridges, cross-chain routers and intents platforms concentrate risk by holding pooled assets across many networks.

Key next signals will be the depth of the upcoming audit report, any architectural changes to Omni or hot wallet usage, KuCoins cooperation on tracing, and whether regulators or major exchanges tighten standards for similar cross-chain services.

Conclusion

The NEAR Intents exploit shows that even sophisticated cross-chain platforms can be tripped up by subtle integration bugs, with relatively modest dollar losses but wider confidence impacts.

For crypto users, the practical takeaway is that infrastructure choice and security practices on bridges and cross-chain routers matter as much as the underlying L1, and upcoming disclosures from NEAR Intents and other venues will help clarify how this risk is being managed.