TLDR
A bug in NEAR Intents cross-chain trading infrastructure allowed an attacker to steal about $3.8 million, forcing the service to halt and cut off multiple networks while a fix was deployed.
- NEAR Intents says a flaw between its Omni deposit/withdrawal layer and smart contract was exploited, draining roughly $3.8 million, mainly from a USDT pool on BNB Chain.
- The team paused services, restricted deposits and withdrawals on 11-plus chains, and pledged full reimbursement while stressing that the core NEAR Protocol blockchain itself was not compromised.
- Stolen funds appear to have moved through KuCoin and into Bitcoin, and NEAR plans a public postmortem and tighter security, highlighting rising systemic risk in cross-chain intents systems.
Deep Dive
1. What Went Wrong Technically
Reports say the exploit stemmed from a bug in the Omni deposit and withdrawal infrastructure interaction with NEAR Intents smart contract, letting an attacker perform unauthorized withdrawals from a cross-chain pool on BNB Chain, mainly in USDT, for about $3.8 million in losses. That mechanism sits between user deposits on various chains and the contract that tracks balances and executes trades, so an integration error directly exposed pooled funds.
Investigators, including ZachXBT, traced irregular outflows from a NEAR Intents BSC hot wallet, with funds sent to KuCoin and then bridged into Bitcoin, according to multiple outlets such as Coindesks exploit coverage.
2. Immediate Impact On Users And NEAR
NEAR Intents halted its service and near.com, then disabled deposits and withdrawals on networks including BNB Smart Chain, Polygon, TON, ethereum/">Optimism, Avalanche, Stellar, Scroll and others while repairs continued and the contract bug was patched. The team has publicly committed to compensate affected users in full, though detailed reimbursement timelines are not yet clear.
Market reaction focused on NEAR (NEAR), the associated ecosystem token. Articles report NEAR falling in the high single digits around the announcement as traders priced ecosystem security risk, even though NEAR Protocols base blockchain and consensus were explicitly described as unaffected in statements cited by Crypto.news.
User loss is capped if reimbursement happens as promised, but cross-chain apps can still disrupt liquidity and sentiment for a whole ecosystem even when the underlying L1 is intact.
3. Recovery Efforts And Cross-Chain Risk
NEAR Intents says it has reported the incident to law enforcement and is working with security and blockchain analytics firms to trace and potentially recover funds, while promising a detailed public postmortem and additional safeguards such as broader formal verification for contracts. Auroras Alex Shevchenko even stated that the team believes it has identified the attacker and gave them a deadline to return funds, echoing prior recovery tactics used in earlier NEAR-linked exploits.
More broadly, the incident underscores that cross-chain trading and intent systems concentrate risk in infrastructure that coordinates deposits and withdrawals across many networks. Bugs in these coordination layers can cascade into multi-chain outages and fast-moving losses, even in otherwise healthy ecosystems.
Conclusion
The NEAR Intents exploit looks like a targeted failure in cross-chain infrastructure rather than a fundamental break of NEAR Protocol, but it reinforces how fragile multi-chain routing and pooled liquidity can be. For crypto users, the key is to watch how quickly reimbursements are executed, how the postmortem changes security practices, and whether exchanges and ETF flows treat this as an isolated application incident or as a broader warning about cross-chain risk.
CoinsKid.Com