TLDR
NEAR Intents, a DeFi cross-chain trading protocol on NEAR Protocol (NEAR), has recovered roughly $3.8 million stolen in a recent smart contract exploit after the attacker returned the funds.
- The exploit stemmed from a bug in NEAR Intents bridge infrastructure, but the team identified the attacker, issued a 48 hour ultimatum, and the full $3.8 million was sent back.
- The loss was confined to Tether on BNB Smart Chain and NEAR Intents has pledged to fully compensate affected users while patching the vulnerability, leaving the NEAR base chain and token untouched.
- The episode highlights how cross chain bridges remain a major DeFi risk and why users should watch for audits, incident response quality, and bug bounty programs when choosing platforms.
Deep Dive
1. How The Hack And Recovery Happened
NEAR Intents paused services after detecting a bug in how its Omni deposit and withdrawal infrastructure interacted with its core smart contract, allowing about $3.8 million in user funds to be drained.
The team and independent investigator ZachXBT traced the stolen funds, including flows through KuCoin and a bridge to Bitcoin, and publicly stated they had identified the exploiter and given them 48 hours to return the money under a responsible disclosure process.
According to a detailed Cointelegraph report, general manager Alex Shevchenko later confirmed that the funds from the 3.8M NEAR Intents hack were sent back in full and that the investigation was halted after restitution was made.
2. Impact On Users And NEAR Itself
Coverage from Yahoo Finance notes that the exploit was limited to USDT on BNB Smart Chain, with NEAR co founder Illia Polosukhin saying the NEAR blockchain and native token remained secure.
NEAR Intents has committed to fully compensating affected users and said the contract side vulnerability was patched, while operations across multiple networks were temporarily paused as part of its SHIELD security response.
NEAR (NEAR) had been up over 180 percent in the prior month and did sell off on the exploit news, but price action and reporting suggest the market viewed this more as a contained protocol incident than a core chain failure.
For users, the key question is not only whether funds were recovered, but whether the protocol is transparent about bugs, rapid in response, and serious about hardening its contracts after an incident.
3. What It Signals About DeFi Security
The same Yahoo Finance piece points out that NEAR Intents had just helped block more than $50 million tied to Bitgets large hack before suffering its own $3.8 million loss, underlining how even security focused DeFi tools can be exploited.
Industry analysis from Decrypt and others stresses that cross chain bridges are especially fragile because they hold large reserves and rely on complex multi chain logic, where small bugs can create outsized losses.
The decision by NEAR Intents to stop the investigation once funds were returned, and to urge would be attackers to use bug bounties instead of exploits, fits a broader DeFi pattern where white hat style recoveries coexist uneasily with serious systemic risk.
Conclusion
The full recovery of $3.8 million shows NEAR Intents can respond quickly and secure restitution, but it also reinforces that bridge and cross chain DeFi protocols remain high risk infrastructure.
For crypto users, this incident is a reminder to treat any protocol handling deposits across chains as a security critical counterparty and to watch closely how it audits its code, handles exploits, and communicates with users.
CoinsKid.Com