NEAR Intents (Omni deposit and withdrawal bug) hack — October 2026

NEAR Intents, a cross-chain trading service in the NEAR ecosystem in which independent market makers called solvers fill users' swaps, lost about $3.8m on 1 October 2026. NEAR Intents said the cause was a bug in how its Omni deposit and withdrawal infrastructure interacted with the Intents smart contract, and NEAR co-founder Illia Polosukhin said the loss was confined to USDT on BNB Chain. The on-chain investigator ZachXBT reported several irregular outflows from the service's BNB Chain hot wallet to a single address, from which the USDT went straight to the exchange KuCoin and was bridged into bitcoin. NEAR Intents' SHIELD monitoring system flagged the activity and the service was paused. The team said it patched the contract-side vulnerability within about an hour, while deposits and withdrawals on eleven networks, including BNB Chain, Polygon, TON and Optimism, stayed closed for roughly twelve more hours until the Omni infrastructure was fixed. The NEAR blockchain and the NEAR token were not affected.

The $3.8m is NEAR Intents' preliminary figure; the detailed report it promised has not been published. It pledged to compensate affected users in full and reported the incident to law enforcement. Early on 2 October its general manager, Alex Shevchenko, said the team had identified the person responsible, published addresses on Bitcoin, on BNB Chain and Ethereum, and on Solana for the funds to be sent back to, and set a 48-hour deadline. He then posted messages addressed to the attacker, encrypted so that only the holder of the theft address's key could read them.

Later on 2 October Shevchenko said the funds had been sent back in full and the investigation was closed, and Polosukhin said the recovery was complete at 14:30 UTC. The Bitcoin return address received 34.59 BTC in four transfers between 14:31 and 15:05 UTC, worth about $2.99m at the time, which this registry read from the chain; NEAR Intents has not said how the rest came back. At 16:15 UTC the theft address on BNB Chain sent the return address a small payment carrying a message that all the funds had been returned and that the sender had been in the wrong. The incident is recorded as funds returned, at the full amount NEAR Intents states. No one has been publicly named.