NEAR Intents Lost $3.8 Million to a Hacker. It Got All of It Back in 24 Hours.
What happened. On October 1, 2026, NEAR Intents — the cross-chain trading infrastructure built around NEAR Protocol — confirmed that an attacker had exploited a flaw in its Omni deposit-and-withdrawal system, draining roughly $3.8 million in assets from a hot wallet on BNB Chain. The stolen funds were moved to the KuCoin exchange and bridged into Bitcoin. NEAR Intents immediately suspended deposits and withdrawals across eleven connected blockchain networks, including BNB Chain, Polygon, TON and Avalanche, while engineers investigated.
The fast part. The vulnerable contract was patched within about an hour of detection, and core services were already coming back online while the team spent roughly twelve more hours checking the rest of the Omni infrastructure. NEAR's main blockchain and its native token were never touched — the exploit was isolated to the cross-chain bridge layer. The company publicly committed to reimbursing every affected user in full, out of its own funds if necessary, before the stolen money was even recovered.
The ultimatum. On October 2, NEAR Intents general manager Alex Shevchenko said the team had identified the attacker and published wallet addresses for returning the Bitcoin, BNB and Solana taken in the exploit, giving the hacker 48 hours to comply under the protocol's responsible-disclosure terms. Less than 24 hours later, the attacker sent back the entire $3.8 million. Shevchenko confirmed the funds were fully recovered the same day.
Why it worked.
- Speed beat secrecy — the team disclosed the breach, the dollar amount and the root cause the same day, instead of waiting for a full post-mortem.
- They stopped the bleeding first — pausing deposits and withdrawals network-wide prevented further losses while the fix shipped.
- The compensation promise came before the recovery, not after — users didn't have to wait to find out whether they'd be made whole.
- Public pressure replaced legal threats — naming the attacker and setting a visible deadline turned the negotiation into a reputational one, which is often faster than a courtroom.
The contrast. 2026 has been the costliest year on record for crypto theft, with September alone seeing over $766 million stolen across dozens of incidents — including Bitget's $387 million hack, attributed to North Korea-linked actors, where the funds were never returned. NEAR Intents' $3.8 million breach was tiny by comparison, but the full, fast recovery is the exception, not the rule — most crypto hacks end with the money gone for good.
Sources: CoinDesk, Crowdfund Insider, CryptoPotato, CoinCentral, crypto.news
When a crisis hits, the first hour decides the story that gets told about you. If your organization needs a response plan that actually holds up under pressure, CGS.GURU helps you build one before you need it — get in touch.
