The $3.8M Left a BSC Hot Wallet; NEAR Intents Shut Eleven Chains to Find the Leak
The contract is patched. Eleven networks are still shut, and the company says the loss is covered in full.
NEAR Intents shut its service after it found a breach[1]. The bug sat in the link between Omni’s deposit and withdrawal system and the NEAR Intents contract[1]. The first report put the loss at about $3.8M[2].
PeckShield put the loss at $3.865M[3]. It said money left a BSC hot wallet in odd bursts[3]. It said the funds went to KuCoin and then bridged to Bitcoin[4].
NEAR Intents said the contract bug is fixed[5]. The lost funds will be paid back in full, it said[6]. Deposits and withdrawals on BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll and Plasma stay closed for about 12 more hours[7].
What to do: hold and wait. NEAR Intents said holders of those assets in HOT Wallet or near.com can swap them once the service is back[8].
Who gains, who loses
Receipts
NEAR Intents stopped its services after detecting a security incident caused by a bug in the interaction between Omni’s deposit-and-withdrawal infrastructure and the NEAR Intents smart contract.
“Earlier today NEAR Intents services were stopped after a security incident was detected.”
NEAR Intents said the incident’s preliminary total loss was approximately $3.8M.
“The preliminary report indicates the total loss of approximately $3.8M.”
PeckShield reported that the NEAR Intents loss was $3.865M and followed multiple irregular outflows from a BSC hot wallet.
“#PeckShieldAlert #ZachXBT has reported that Near Intents was exploited for $3.865M after its BSC hot wallet saw multiple irregular outflows.”
PeckShield reported that the NEAR Intents exploiter moved the stolen funds to KuCoin and bridged them to Bitcoin.
“The exploiter has transferred the stolen funds to #Kucoin and bridged them to BTC.”
NEAR Intents said the contract-side vulnerability had been patched.
“The contract-side vulnerability has been patched.”
NEAR Intents committed to compensating the affected funds in full.
“These funds will be compensated in full.”
NEAR Intents said deposits and withdrawals on BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll and Plasma would remain unavailable for approximately 12 additional hours while the Omni infrastructure was repaired.
“Deposits and withdrawals on the following networks will remain unavailable for an additional ~12 hours while fixes to the Omni infrastructure are completed: BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll and…”
NEAR Intents said users holding assets from the affected networks inside NEAR Intents, HOT Wallet or near.com would be able to swap those assets into other assets after the service returned.
“In case users hold any assets from these chains inside NEAR Intents (for example, in HOT wallet or on near(.)com), they will be able to swap them into other assets once NEAR Intents is back up (in ~1h).”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.