en
Back to the list

NEAR Intents GM Says $3.8 Million in Hack Funds Returned in Full

source-logo  thedefiant.io 7 h
image

$NEAR Intents general manager Alex Shevchenko said Oct. 2 that funds from the protocol’s roughly $3.8 million exploit had been returned in full and that the team was stopping its investigation.

The protocol had pledged full compensation after the Oct. 1 incident, before the recovery announcement. Shevchenko did not say whether that compensation had already been paid.

The published Bitcoin recovery wallet received about 34.59 BTC on Oct. 2. Mempool valued its balance at approximately $2.95 million when reviewed.

app-logo

Know when your
coins move

Alerts, real-time prices, and market news — all in one app
4.8 based on 40K reviews in the App Store and Google Play

The shared Ethereum and $BNB Chain recovery address also received about 0.2953 ETH and 1 $BNB on Oct. 2. Those receipts alone do not account for the entire preliminary loss. Shevchenko’s announcement did not include an asset-by-asset reconciliation of the full recovery.

“We are stopping the investigation,” Shevchenko wrote. “Please use bug bounties instead of disrupting the services.”

On the evening of Oct. 1 ET, Shevchenko had published three return addresses—for Bitcoin, Ethereum/$BNB Chain and Solana—and given the recipient a 48-hour window to return the funds. The Ethereum transfer carried an onchain message: “Willing to cooperate, reply with your Signal so contact is possible.”

Cross-Chain Infrastructure Marked Operational

$NEAR Intents attributed the incident to a bug in the interaction between its smart contract and the Omni infrastructure handling deposits and withdrawals. Its Oct. 1 statement said the contract-side vulnerability had been patched, but deposits and withdrawals across 11 networks would remain unavailable for approximately another 12 hours while infrastructure fixes were completed.

Shevchenko announced that near.com was back up later that morning. The app uses $NEAR Intents to execute cross-chain swaps.

By Oct. 2, the protocol’s status dashboard listed cross-chain infrastructure and integrated blockchains as operational, although core services still showed a partial outage. That is a narrower recovery than an all-services-clear notice.

The team’s Oct. 1 statement also promised a detailed public report in the following days.

thedefiant.io