NEAR Intents recovers entire stolen $3.8M after ultimatum to exploiter
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
NEAR Intents recovered approximately $3.8 million that was stolen during a security breach on Thursday. The project identified the exploiter and issued a 48-hour ultimatum to return the funds under the terms of "responsible disclosure." NEAR Intents general manager Alex Shevchenko confirmed on Friday that the full amount had been returned and that the investigation was being halted.
Why it matters
The recovery of the entire stolen amount mitigates potential losses for NEAR Intents users and demonstrates a successful resolution through engagement with the exploiter. The incident also highlights the risks associated with vulnerabilities in smart contract infrastructure and suggests a preference for bug bounties over disruptive actions.
Key context
NEAR Intents paused its services after detecting a bug related to the Omni deposit and withdrawal system's interaction with its smart contract. The initial breach led to the theft of $3.8 million in user funds, with a pledge from NEAR Intents to fully compensate affected users. Blockchain investigator ZachXBT noted that the stolen funds were moved to the KuCoin exchange and converted to Bitcoin.
Key numbers and entities
$3.8 million was the amount stolen and subsequently recovered. NEAR Intents is the affected project. Alex Shevchenko is the general manager who announced the fund return. The KuCoin exchange and blockchain investigator ZachXBT were also mentioned in connection with the incident.
What remains unclear
The source does not specify the identity of the exploiter, the exact nature of the vulnerability exploited, or the technical details of how the funds were recovered. Further details about compensation processes and long-term security measures are also not provided.