#NEARDown10%AfterExploit
About NEARDown10%AfterExploit
NRR, the first US ETF offering spot NEAR exposure, listed on NYSE Arca on Sep 29. On Oct 1, NEAR Intents confirmed an exploit involving Omni’s deposit and withdrawal infrastructure and its smart contracts, with initial losses of about $3.8M. The team fixed the contract issue and pledged full reimbursement; NEAR Protocol’s base network was unaffected. NEAR fell nearly 10% below $5, while NRR logged about $57.7M in net inflows over its first three trading days.
Populaire
Récents
NEARDown10%AfterExploit Publications populaires
⚡️UPDATE: The NEAR Intents attacker has RESPONDED.
The NEAR Intents recovery wallet received 1 BNB with a message saying:
“Willing to cooperate, reply with your Signal so contact is possible.”
The sender address is tagged on BNBScan as “NEAR Intents Exploiter 1” and was previously identified by ZachXBT as one of the primary addresses tied to the exploit.
The response came within Alex Aurora’s 48-hour window offering a path to cooperate, return funds and potentially receive a bounty.
If negotiations hold, the exploit could move toward RECOVERY rather than a prolonged laundering attempt.
Coin Bureau
⚠️ALERT: NEAR Intents reports EXPLOIT that caused an $3.8 MILLION loss.
The issue came from a bug linked to its Omni deposit and withdrawal system.
near:native says all affected funds will be FULLY compensated.
NEAR Intents is a multichain transaction service that enables users and AI agents a shorter transaction process.
DEPOSITS and WITHDRAWALS on BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll and Plasma will stay paused for about 12 MORE HOURS.
The contract bug has been FIXED, and NEAR Intents and near(.)com are expected to return within about 1 HOUR.
The incident has also been reported to law enforcement, while security firms work to trace the funds.
Last week, NEAR Intents stopped hackers from laundering more than $50M stolen from Bitget and even froze $503K mid-transaction.
Bitget's CEO publicly thanked them.
Three days later, NEAR Intents got hacked for $3.8M itself.
I'm trying to know if they annoyed the hackers or what.
Because the timing is ridiculous.
Current Price: $NEAR 5.095 (-4.57% today)
NEAR has experienced a massive parabolic uptrend, from a low of $1.849 to a high of $5.580. It is currently the most volatile of the four assets, experiencing a sharp 4.57% correction today as traders likely take profits after the huge run.
· Moving (MA): The price is testing the 5-day MA (5.106) and has broken below the 10-day MA (4.887).
The 20-day MA is lagging significantly at $3.995, highlighting how steep and extended this recent rally has been.
NEAR is trading around $NEAR 4.699 after cooling down from its $5.580 peak.
Past Ups & Downs:
* Low: Hit a floor around $1.245 before massive volume kicked in.
* High: Rallied strongly past $NEAR 5.50.
Predictions:
* Short-Term: Holding support near $4.21 (MA20) could trigger another jump back to $5.50.
* All-Time Best Prediction: If volume stays strong, NEAR can target $7.50–$NEAR 8.00 long-term!
The NEAR team identified who the hacker was that stole $3.8 million and bro folded instantly 😭
Alex Shevchenko 🇺🇦
We have identified you, sir.
Please return the funds to the following addresses:
Bitcoin: bc1qjhv3hu8rfteh5e8exfmalvx2z3pzlmjlgnzxey
BNB / Ethereum: 0xB18a1aEDfde8B70FD67012C9E9c7a088B4d0C0e7
Solana: AHTfKaeRcaK1sbSG8MFJS2uPxLBChfenigNtvbWEkhKD
You know better than most how responsible disclosure works — this is the last window to use it. After 48 hours, that window closes.
The funds from the $3.8M NEAR Intents exploit have been returned, just one day later, and the investigation is closed.
Thanks to SHIELD, the AI security layer on Intents, along with some aggressive detective work, the Intents team identified the party responsible less than 24h after the hack, established communication, and got the funds back in full at 14:30 UTC today.
Thank you to @alexauroradev and the whole @near_intents team for this fast and clean resolution – as well as the broader @NEARProtocol ecosystem and SHIELD partners for the support and help. There’s been relentless work over the past 24 hours by so many people to make this right and it is a great testament to this community’s values and determination.
To echo Alex: for security researchers looking for exploits, we encourage you to use bug bounties. They exist for a reason.
At NEAR, we believe that privacy is a right, but not as a way to facilitate crime. Our technology is built to expand human agency and opportunity, not to facilitate criminal activity. The events of the last week have shown the value of SHIELD to find suspicious activity before things escalate too far, as well as to accelerate resolution so the vast majority of legitimate users are not affected. Confidentiality cannot come at the expense of lawfulness and I strongly believe it doesn’t have to.
We’ve learned a great deal from this incident and work is already underway to harden our security systems and further adapt to the changing cybersecurity landscape. AI may be accelerating exploits, but it can also help us defend against them. I hope our entire industry responds with vigilance and feels the same sense of urgency to work together.
UPDATE: The $3.8 million stolen in the NEAR Intents exploit has been returned in full, General Manager Alex Shevchenko said, hours after giving the identified entity 48 hours to repay it.
"We are stopping the investigation. Please use bug bounties instead of disrupting the services," he wrote.
The Block
UPDATE: NEAR Intents General Manager Alex Shevchenko said they have identified the entity behind the roughly $3.8 million exploit and gave them 48 hours to return the funds.
"You know better than most how responsible disclosure works — this is the last window to use it," Shevchenko said. near:native
