NEAR Intents Confirms Attack, Involving Over $3.8 Million

TechFlow reports that on October 01, NEAR Intents released a security advisory confirming it was attacked. Preliminary investigations show the vulnerability stems from flaws in the interaction between the Omni deposit and withdrawal infrastructure and contracts. Contract vulnerabilities have now been patched, core services are expected to resume within one hour, and full compensation for affected assets has been pledged.

NEAR Intents stated that deposit and withdrawal services on multiple public chains, including BSC, Polygon, and TON, would be additionally suspended for approximately 12 hours. The incident has been reported to authorities, and on-chain tracking is underway.

Subsequently, on-chain investigator ZachXBT reported that multiple abnormal fund outflows were detected from NEAR Intents' BSC hot wallet. The stolen funds were transferred to KuCoin and further bridged to the Bitcoin network. The total amount involved currently exceeds $3.8 million.