Ten USDT In, $3.87M Out, Signatures Valid the Whole Way
Ten USDT funded the wallet. The spend rights were valid, and the vault took them.
On October 8, 2026, NEAR Intents lost $3.87 million from a BNB Chain vault[1]. A wallet funded with 10 USDT took the money using signed spend rights the vault accepted[1].
The check that let it through was the signed message, and it passed[1].
The team said it got the money back in full after giving the attacker 48 hours, then closed the case[2].
What to do: no action needed — the team said it got the money back in full and closed the case[2].
Who gains, who loses
Receipts
On October 8, 2026, NEAR Intents lost $3.87 million from a BNB Chain vault after a wallet funded with 10 USDT used valid signed authorizations.
“A wallet funded with 10 USDT drained $3.87M from a BNB Chain vault serving NEAR Intents using valid signed authorizations.”
NEAR Intents announced full recovery after a 48-hour ultimatum and closed its investigation.
“After a 48-hour ultimatum, the team announced a full recovery and closed its investigation; the full story of the failure remains unclear.”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.