NEAR Intents Recovers Full $3.8 Million Stolen in Security…
By Abdelaziz Fathi
AI summary of the source article
NEAR Intents confirmed the full recovery of $3.8 million stolen during a security exploit, resolving its asset-recovery phase ahead of a 48-hour deadline given to the alleged attacker. General Manager Alex Shevchenko stated the funds were returned in full across multiple routes, including approximately 34.59 Bitcoin. The exploit originated from an interaction bug between the protocol's Omni deposit-and-withdrawal infrastructure and a NEAR Intents smart contract, which was subsequently patched. While the return resolves immediate shortfalls and eliminates the need for direct protocol compensation to users, detailed technical explanations of the vulnerability and authorization mechanisms remain undisclosed.
Why it matters
The full recovery eliminates immediate financial losses and user reimbursement obligations, shifting focus to operational risk and infrastructure security. It also demonstrates that transaction-screening capabilities do not preclude vulnerabilities within underlying deposit, withdrawal, or settlement components.
Key facts
- NEAR Intents recovered the entire $3.8 million stolen in an exploit after giving the attacker a 48-hour return window.
- The incident was caused by an interaction bug between the Omni deposit-and-withdrawal infrastructure and a NEAR Intents smart contract.
- Roughly 34.59 Bitcoin (worth around $3 million at transfer time) was sent to the designated Bitcoin recovery address as part of the return.