TLDR
A security system around NEAR Intents stopped a $3.8 million exploit and helped ensure users were made whole.
- Near Intents, a cross-chain swap protocol, lost about $3.8 million to a smart contract bug but later recovered all funds from the exploiter.
- NEARs SHIELD AI watchdog had already blocked a separate $50 million swap attempt tied to the Bitget mega-hack, highlighting active defense in DeFi.
- The incident widens debate over how much control watchdogs should have over DeFi flows and what similar systems other protocols may adopt.
Deep Dive
1. What Happened To The $3.8M
Near Intents, a NEAR-based cross-chain swap service, was exploited when a bug in its interaction with Omnis deposit/withdrawal layer let an attacker siphon roughly $3.8 million.
The team halted the service, posted return addresses on several chains, and publicly told the attacker we have identified you while giving a 48-hour window to send funds back as a form of responsible disclosure.
According to reporting, the exploiter returned the full amount and attached an on-chain note saying they were in the wrong and encouraging others to use bug bounties, allowing Near Intents to stop its investigation and move to compensate users in full.
Users of this protocol avoided lasting loss, but only because the team could respond quickly and the attacker ultimately cooperated.
2. How The DeFi Watchdog Worked
NEARs SHIELD AI system acts as a real-time watchdog over NEAR Intents, monitoring flows and intervening when funds are known to be hacked or exploit-linked.
Days before the $3.8 million bug, SHIELD reportedly blocked a $50 million swap attempt from the address behind Bitgets roughly $387 million breach, preventing laundered funds from moving through the Intents platform.
This shows a shift from purely neutral routing toward active surveillance and blocking, using on-chain intelligence and AI to decide which transactions a protocol will process.
For users, these systems can reduce the chance that they trade against stolen funds or get caught in an exploit path, but they also introduce centralized decision-making.
3. Why It Matters For DeFis Future
Active watchdogs raise hard questions: whether blocking transactions increases legal liability, how transparent the rules must be, and whether DeFi should act more like regulated financial infrastructure.
Some projects, such as THORChain, have previously resisted blocking swaps, while NEAR Intents approach suggests a more interventionist model that many regulators may prefer.
Going forward, watch for more protocols to add similar shield layers, clearer policies on when flows are blocked, and whether these controls become a de facto standard for cross-chain services.
If you rely on cross-chain DeFi, it is worth checking whether your platforms run watchdog systems, and how they balance user protection against censorship and centralization risk.
Conclusion
The blocked $3.8 million exploit and full recovery at Near Intents show both the benefits and trade-offs of embedding watchdogs into DeFi infrastructure.
Active defenses like SHIELD AI can materially reduce user losses and frustrate large-scale attackers, but they also move DeFi closer to curated, policy-driven transaction flows rather than pure neutrality.
For crypto users, the key is to understand which protocols intervene, under what rules, and how that affects both safety and the core ideals of decentralization.
