NEAR Intents, a notable protocol within the NEAR ecosystem, claimed on October 2, 2026, that it has identified the individual responsible for a recent $3.8 million hack. The team issued a public 48-hour ultimatum demanding the hacker return the stolen funds through a process of “responsible disclosure.” This development is particularly significant as it brings a rare moment of potential resolution to a high-profile security breach that has rattled many users and raised questions about the vulnerabilities in cross-chain and DeFi infrastructures.
Why this matters
The crypto space continues to grapple with frequent hacks and exploits, often targeting decentralized finance (DeFi) projects and multi-chain protocols. These incidents undermine user confidence and expose systemic security risks in smart contract interactions and bridging mechanisms. NEAR Intents' breach leveraged a bug within its Omni deposit and withdrawal system, a critical component linking different blockchain networks. Such exploits highlight ongoing challenges for interoperability solutions, which remain a focal point for innovation and risk in blockchain development.
Moreover, the public identification of the alleged hacker and the ultimatum represent a relatively unusual approach. Most projects simply report thefts and pursue legal or technical remedies without direct communication with the perpetrators. NEAR Intents' stance reflects increased sophistication in handling crisis management and the growing use of “responsible disclosure” frameworks — where hackers can report or return vulnerabilities and funds safely, often to avoid prosecution and reputational damage.
What is happening
On October 1, NEAR Intents detected suspicious activity involving a “bug in the Omni deposit and withdrawal infrastructure interaction with the NEAR Intents smart contract.” The attack led to the theft of approximately $3.8 million in user funds, which prompted the protocol to pause all services to prevent further losses and conduct an investigation.
According to Alex Shevchenko, NEAR Intents’ general manager, the team has traced the stolen funds and identified the hacker behind the exploit. Shevchenko outlined this stance clearly on X (formerly Twitter), stating, “We have identified you, sir” and sharing three wallet addresses for Bitcoin (BTC), Binance Coin (BNB), and Solana (SOL) as channels through which the hacker should return the assets.
A blockchain investigator known as ZachXBT verified that the stolen amounts were moved to the KuCoin exchange and converted into Bitcoin via bridging protocols. NEAR Intents pledged to compensate affected users in full if the funds are returned within the given window.
This incident is part of a broader wave of crypto attacks that have increased in both frequency and scale throughout 2026. The same month saw cumulative losses exceeding $768 million, reflecting systemic vulnerabilities in cross-chain infrastructure and smart contract security, as noted by several industry watchers.
What readers can take away
- DeFi and cross-chain protocols remain prime targets for sophisticated attackers exploiting smart contract vulnerabilities.
- Protocols are increasingly adopting public and direct communication strategies, including ultimatums and “responsible disclosure” invitations, to recover stolen funds.
- Users should recognize that paused or frozen protocol services are often immediate responses to breaches and signals that teams are actively managing incidents.
- The path to compensation depends significantly on community and protocol goodwill, hacker cooperation, and the speed of incident response.
- Bridges and multi-chain mechanisms introduce complex attack surfaces, suggesting users and developers must remain cautious and prioritize security audits.
What to watch next
The critical deadline is the 48-hour ultimatum issued by NEAR Intents, after which the opportunity for “responsible disclosure” will close. Should the hacker comply and return the funds, affected users may receive full reimbursement, setting a positive precedent for other projects to engage perpetrators in crisis resolution.
Conversely, if the hacker fails to respond, NEAR Intents will likely pursue more aggressive legal, technical, or community-led countermeasures. This response could include blacklisting wallets, working with exchanges like KuCoin to freeze assets, or escalating law enforcement involvement.
FAQ
How was the NEAR Intents protocol hacked?
The breach exploited a bug in the Omni deposit and withdrawal infrastructure that interacts with NEAR Intents’ smart contracts. This vulnerability allowed the hacker to siphon approximately $3.8 million in user funds from the protocol.
What does “responsible disclosure” mean in this context?
Responsible disclosure is a process where a hacker or security researcher reports a vulnerability or returns stolen assets in a controlled manner to minimize harm, often in exchange for amnesty or a bounty. Here, NEAR Intents has given the hacker a 48-hour window to return the stolen funds before taking further action.
What happens if the hacker ignores the ultimatum?
If the hacker does not return the funds within the stated timeframe, NEAR Intents may close the window for responsible disclosure and escalate their response. This could involve collaborating with exchanges to freeze assets, engaging law enforcement, or deploying technical defenses to protect users and recover funds.
This article is informational only and is not financial advice. Original source: read more here.
- 𝕏 Twitter: @0_Simone_0
- 🎥 YouTube: Audiobook Free – Author Ciro Irmici
- 📸 Instagram: @spartaco_94_
- 💻 Tech Trends: techtrendspins.blogspot.com
- 💪 Fitness Home Journal: fitnesshomejournal.blogspot.com
- 🐾 Pet Care Inspo: petcareinspo.blogspot.com
- 🌍 Nomad Vibes Board: nomadvibesboard.blogspot.com
- 💰 Crypto Radar Board: cryptoradarboard.blogspot.com
- 🌱 Green Planet Pins: greenplanetpins.blogspot.com
- 🥗 Healthy Eats Board: healthyeatsboard.blogspot.com
Enjoyed this post? Share it or explore more across my blogs and channels.