hack or exploit

NEAR Intents reports $3.8 million loss after smart contract bug

23Importance
closedStatus
19News media
36Pieces
Published
Updated
Since then
35 new reports
Also mentions
BTCBGBBNB +5

NEAR Intents reported a security incident tied to its Omni deposit and withdrawal setup and its smart contract, with a preliminary loss of about $3.8 million. The protocol paused services, later said the flaw was patched and compensation would be full, and then said the full amount had been returned and its investigation was closed.

Share on X Share on Telegram Share on Reddit Share on WhatsApp

Key claims & sources

✓
The protocol halted services after the incident and said deposits and withdrawals on 11 networks were disrupted while repairs were underway.
NEAR Intents Halts 11 Networks After $3.8 Million Security Incident
✓
NEAR Intents said it would reimburse affected users in full.
NEAR Intents Pledges Full Compensation After a Bug Lets an Attacker Drain $3.8…
✓
NEAR Intents said a security incident involving its Omni deposit and withdrawal infrastructure and its smart contract left it with a preliminary loss of about $3.8 million.
NEAR Intents Says Security Incident Tied to Omni Bug Led to About $3.8M Loss
✓
The team said most services had been restored while investigators traced the assets and compensation plans remained in place.
NEAR Intents Identifies $3.8M Hacker, Gives Them 48 Hours to Return Funds
✓
A published recovery wallet received about 34.59 BTC.
NEAR Intents GM Says $3.8 Million in Hack Funds Returned in Full
✓
NEAR Intents said the attacker first made contact through a 1 BNB transaction that carried a Signal request.
NEAR Intents Hacker Returns Full $3.8M After Opening Negotiations
✓
NEAR Intents said the full $3.8 million had been returned and it had stopped its investigation.
NEAR Intents Says Exploited $3.8 Million Is Back, Closes Its Hack Investigation

What it means

Users on the affected networks are the people who would notice this first the next morning: deposits and withdrawals were paused, and later most services were restored while some disruption continued. The event also reached the broader NEAR market, which was still reacting around the time the incident was disclosed.

In practice, NEAR Intents shifted from a halted state to partial restoration, while keeping its promise to cover losses in full. What did not change is that the protocol still treated the incident as a security issue tied to its own infrastructure and contract interaction.

Market reaction i

NEAR ProtocolNEAR it is the asset of the company or protocol in the event
first headline
-0.6% 2 h before
-4.5% 4 h after
$5.09price at publication
12data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 1 13:14
Crypto Briefing scoop
Breaks the event: $3.8M
+15 min
Oct 1 13:30
BeInCrypto adds
Adds $32B, with quotes
+27 min
Oct 1 13:41
The Defiant echo
Confirms it 27 min later, with the same facts
+59 min
Oct 1 14:13
Unchained context
Its angle: repairing, including, finishes; with quotes
+1 h 3 m
Oct 1 14:18
+1 h 3 m
Oct 1 14:18
CoinDesk echo
No new facts: vulnerabili, temporarily, suffered; with quotes
+2 h 13 m
Oct 1 15:27
U.Today echo
No new facts: emergency, isolates, silence
+2 h 27 m
Oct 1 15:42
AMBCrypto echo
No new facts: reporting, retreated, high
+2 h 29 m
Oct 1 15:43
+2 h 29 m
Oct 1 15:43
Cointelegraph echo
No new facts: assistance, stemmed, suffers; with quotes
+2 h 47 m
Oct 1 16:01
The Crypto Guardian echo our clock
No new facts: 000, 800
+3 h 18 m
Oct 1 16:32
crypto.news echo
No new facts: pullback, involved, outlook; with quotes
+3 h 21 m
Oct 1 16:35
Crypto Economy echo
No new facts: reimbursed, originated, ecosystem; with quotes
+4 h 35 m
Oct 1 17:49
crypto.news echo
No new facts: promising, affecting, resumes; with quotes
+4 h 54 m
Oct 1 18:08
DefiLlama hacks echo our clock
No new facts: technique, logic
+5 h 4 m
Oct 1 18:18
Protos echo
No new facts: transactions, immediately, unavailable; with quotes
+5 h 16 m
Oct 1 18:30
+9 h 54 m
Oct 1 23:08
The Coin Republic echo
No new facts: documentation, investigated, restoration; with quotes
+12 h 47 m
Oct 2 02:02
Cointelegraph context
Its angle: with quotes
+12 h 48 m
Oct 2 02:02
The Defiant echo
No new facts: early, none; with quotes
+12 h 52 m
Oct 2 02:07
Crypto Briefing echo
No new facts: increasing, confidence, potential
+16 h 48 m
Oct 2 06:03
Crypto News Australia adds
Adds $5.5M, with quotes
+17 h 49 m
Oct 2 07:03
BeInCrypto adds
Adds the identifier 0xb18a1aedfde8b70fd67012c9e9c7a088b4d0c0, with quotes
+23 h 4 m
Oct 2 12:19
Decrypt echo
No new facts: reactions, spectrum, bullish
+1 d 2 h
Oct 2 15:33
The Cryptocurrency Post echo
No new facts: completed, official, partners; with quotes
+1 d 2 h
Oct 2 15:58
CP CryptoPotato echo
No new facts: investigators, identifies, assessment; with quotes
+1 d 2 h
Oct 2 16:07
The Defiant adds
Brings into the story: GM
+1 d 4 h
Oct 2 17:23
Crypto Briefing echo
No new facts: highlighting, underscores, strategies
+1 d 4 h
Oct 2 18:00
AMBCrypto adds
Brings into the story: THESE
+1 d 6 h
Oct 2 19:25
+1 d 12 h
Oct 3 02:12
+1 d 18 h
Oct 3 07:30
Crypto News Flash echo
No new facts: negotiations, discussions, researchers; with quotes
+1 d 22 h
Oct 3 11:59
Cointelegraph echo
No new facts: respond, sum
+1 d 23 h
Oct 3 12:30
AMBCrypto echo
No new facts: extended, decline, probe
+2 d 23 h
Oct 4 13:01
+3 d 20 h
Oct 5 09:42
Unchained echo
No new facts: researcher, kuncoro, arrived; with quotes

Thefts of a similar size

WhenWhat happenedFigure
3.6 years ago Patricio Worthalter · Phishing attack incident $3.8M
2.1 years ago Onyx · Contract vulnerability incident $3.8M
3.6 years ago Rocket Pool · Phishing incident $3.8M
4.4 years ago XCarnival · Deposit Logic Flaw incident $3.8M
5.7 years ago DODO AMM · Improper Access Control incident $3.8M

4282 incidents stored · 569 were as large as this one or larger ($3.8M)