Image default
Crypto NewsNews

NEAR Intents exploit: $3.8M loss, payback pledged

NEAR Intents exploit: .8M loss, payback pledged

NEAR Intents stopped services on October 1, 2026, after a bug in the handoff between its Omni deposit and withdrawal infrastructure and the Intents smart contract. The team put the preliminary loss at about $3.8 million and said those funds will be compensated in full.

The pause hits users of a cross-chain swap service that routes deposits through Omni Bridge and settles trades on NEAR. People with balances on the affected networks cannot deposit or withdraw there for about 12 more hours. The team said they can still swap those balances into other assets once core service returns.

What the team said caused the NEAR Intents exploit

In a post on X, NEAR Intents said services were stopped after a security incident was detected earlier on October 1. It blamed a bug in how the Omni deposit and withdrawal infrastructure interacted with the NEAR Intents smart contract. The account said the contract-side vulnerability has been patched, and that NEAR Intents and near.com were expected to resume within about an hour of the 12:53 UTC post.

Deposits and withdrawals stay unavailable for about 12 more hours on BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll, and Plasma while Omni infrastructure fixes finish, the post said. Users who hold assets from those chains inside NEAR Intents, including in HOT wallet or on near.com, will be able to swap them into other assets once the service is back.

The incident has been reported to law enforcement. The team said it is working with security and blockchain analytics partners to trace the funds and pursue recovery, and that a detailed report will follow in the coming days. The post did not name the agency, the partners, or a compensation timetable.

Where ZachXBT says the funds went

On-chain investigator ZachXBT flagged irregular outflows from a NEAR Intents BSC hot wallet. A tracing graphic credited to ZachXBT and marked with a TRM logo, and circulated by Cointelegraph and other accounts, shows 3,865,021 BSC_USD leaving a NEAR Intents wallet in seven transfers to an address beginning 0x09fd and ending ad37. Relays of the alert give that address in full as 0x09fd1f5d9f185067a92493e43aa259ea4ab3ad37.

The same graphic shows about 101.68 ETH moved in three transfers, and about 7.03 BTC bridged in eight transfers to a Bitcoin address beginning bc1qwk on October 1. Separate BNB hops, including 250 BNB and 100 BNB transfers labeled September 30 and October 1, run into KuCoin deposit addresses.

NEAR Intents has not published those wallet paths. The dollar figure in the official post matches the scale ZachXBT flagged. The team has not confirmed the KuCoin or Bitcoin legs.

What stays open for users

Omni Bridge is NEAR’s multi-chain asset bridge. NEAR documentation describes it as using chain signatures and a decentralized multi-party computation service to move assets between networks, with BNB and Polygon among the chains it lists. NEAR Intents describes itself as a trading protocol for onchain markets and tokenized assets, and its bridging page says Omni Bridge receives the asset in a cross-chain transfer.

The practical split in the October 1 notice is narrower than a full shutdown. Core swap service on NEAR Intents and near.com was slated to return within about an hour of the post. Deposit and withdrawal rails on the 11 named networks were not. Anyone waiting on a BSC, Polygon, or TON withdrawal is still blocked on that rail for the rest of the 12-hour window. Anyone already holding those assets inside the system was told they can swap out once the core service is up. The compensation line is a pledge, not a completed payment. The post does not say whether users will be made whole in the original asset, in a stablecoin, or on a set date.

What the team still owes the public

The outage lands days after NEAR Intents publicly described blocking suspected stolen funds from a separate exchange hack. Cointelegraph reported on September 29 that the protocol said its SHIELD system blocked more than $50 million in attempted transfers linked to the Bitget hack, froze $503,000 mid-swap, and let about $166,000 through

NEAR Intents said a detailed report will be shared in the following days. Open items include the exact bug, whether the loss was limited to the BSC hot wallet, which law-enforcement agency took the report, and when the compensation will be paid. Deposit and withdrawal service on the 11 listed networks was still on the about-12-hour hold as of the October 1 notice. Return to the team statement or the fund path.

 

Related posts

The Ethena Crypto Buyback Math Puts the $2 ENA Target to the Test

George K. Kwak

Digital Assets Gain Fresh Attention as the Crypto Market Enters a New Chapter

Moises K. Clay

Stacks Crypto Erupts Overnight as STX Price Surges +30%

George K. Kwak