$3.8M Left NEAR Intents on BNB; a Fifth Ran Through Its Own Swap
Bitquery followed the money out: fresh wallets, exchange deposit addresses, and one Hyperliquid position nobody has touched.
The stolen funds were swapped to BNB and spread across 32 fresh wallets[1]. Bitquery traced two routes into labelled KuCoin deposit addresses[2]. One carried 800 BNB on BNB Chain, the other 70 ETH on Ethereum, about $802k in all[2].
Four Bitcoin wallets held 34.69 BTC, unspent when checked[3]. On Hyperliquid, 165.3 XMR1 sat untouched[4].
About $822k of the loot ran through NEAR Intents’ own swap[5]. That includes the 750 BNB paid into the vault being drained[5]. NEAR Intents’ general manager said the team had found the person behind the loss[6]. He gave 48 hours from October 2 to return the roughly $3.8 million[6].
What to do: no action needed — the project says it will pay affected users back in full[7].
Who gains, who loses
Receipts
The stolen funds were swapped to BNB and distributed across 32 fresh wallets.
“The swaps ran through the swap built into MetaMask and through CoW Swap, a DEX aggregator.”
The theft included 800 BNB sent to a KuCoin deposit address on BNB Chain and 70 ETH routed through additional wallets into three KuCoin deposit addresses on Ethereum.
“Together the 2 routes carried about $802k.”
The four Bitcoin wallets held a combined 34.69 BTC, and none had spent it when Bitquery checked the balances.
“By the afternoon the Bitcoin sat in those 4 wallets.”
A portion of the funds was bridged to Hyperliquid, converted into 165.3 XMR1, and remained untouched when checked.
“When we last checked, 165.3 XMR1 was still sitting in the Hyperliquid account, untouched.”
Approximately $822k of the stolen funds was swapped through NEAR Intents itself during the theft, including 750 BNB paid into the vault being drained.
“Add it up and about $822k of the loot, roughly a fifth, was handled by NEAR Intents' own swap service.”
NEAR Intents general manager Alex Shevchenko said on October 2 that the exploiter had been identified and gave the person 48 hours to return the funds.
“Alex Shevchenko, general manager of NEAR Intents, said on October 2 that the team has identified the person responsible for the roughly $3.8 million loss the cross-chain protocol disclosed a day earlier.”
NEAR Intents said the incident was caused by a bug in the interaction between its Omni deposit-and-withdrawal infrastructure and its smart contract, and said affected users would be compensated in full.
“The project attributed the cause to “a bug in the Omni deposit and withdrawal infrastructure interaction with NEAR Intents smart contract.”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.