{"id":33002,"date":"2026-10-02T14:25:55","date_gmt":"2026-10-02T13:25:55","guid":{"rendered":"https:\/\/investx.fr\/en\/2026\/10\/02\/near-intents-hack-3-8-million-crisis-response\/"},"modified":"2026-10-02T14:26:04","modified_gmt":"2026-10-02T13:26:04","slug":"near-intents-hack-3-8-million-crisis-response","status":"publish","type":"post","link":"https:\/\/investx.fr\/en\/crypto-news\/near-intents-hack-3-8-million-crisis-response\/","title":{"rendered":"NEAR Intents Hacked for $3.8M: Why the Team’s Response Changes Everything"},"content":{"rendered":"\n

A DeFi<\/strong> protocol exploited for $3.8 million<\/strong> \u2014 on paper, that’s a disaster. But what happened in the hour following the attack on NEAR Intents<\/strong> left the crypto community stunned.<\/p>\n\n\n\n

From a bug fix deployed in under 60 minutes, to transparent communication and a commitment to full reimbursement<\/strong> of affected users, the team turned a potentially fatal crisis into a textbook example of incident management. Yet the underlying question remains wide open: is the security of cross-chain<\/strong> protocols still up to the challenge?<\/p>\n\n\n\n

A deep dive into a hack that, paradoxically, could end up strengthening confidence in the NEAR<\/strong> ecosystem.<\/p>\n\n\n\n

A Surgical Exploit Targeting NEAR’s Cross-Chain Infrastructure<\/h2>\n\n\n\n

NEAR Intents<\/a> is the cross-chain asset trading infrastructure built on the NEAR<\/strong> protocol. It allows users to swap tokens across different blockchains through a system of decentralized market makers<\/em>. It was precisely this interoperability<\/strong> layer that the attacker chose to target.<\/p>\n\n\n\n

According to initial on-chain analysis, the exploit drained $3.8 million<\/strong> by taking advantage of a vulnerability in the transaction validation logic. The exact attack vector has not yet been fully disclosed publicly \u2014 a standard precaution to prevent copycat attacks on similar protocols. Funds were extracted across multiple tokens, with a portion quickly converted through DEXs<\/strong> to obscure the trail.<\/p>\n\n\n\n

This type of attack on bridges<\/strong> and interoperability protocols is nothing new: Ronin Network<\/strong> ($625M<\/strong>), Wormhole<\/a> ($320M<\/strong>), Nomad<\/strong> ($190M<\/strong>) \u2014 the list of cross-chain exploits is long and painful. NEAR Intents escaped with a significantly smaller loss, but the nature of the vulnerability raises structural questions about the security of cross-chain abstraction layers.<\/p>\n\n\n\n

Patched in 1 Hour, Full Repayment Guaranteed: The Hack That Redefines Crisis Management<\/h2>\n\n\n\n

What sets this incident apart is the speed and transparency of the response. The NEAR<\/strong> team detected the anomaly, identified the vulnerability, and deployed a fix in under 60 minutes<\/strong> \u2014 an exceptional turnaround in an industry where teams sometimes take days to react, watching funds drain away in real time.<\/p>\n\n\n\n

Shortly after, the protocol officially announced full reimbursement<\/strong> of all users affected by the exploit. This decision, while costly, sends a powerful signal: the protocol’s treasury absorbs the blow rather than passing it on to victims. It is a rare commitment, especially at this scale.<\/p>\n\n\n\n

The communication was equally exemplary: real-time updates across social media, a post-mortem announced, and zero attempt to downplay the incident. In an ecosystem where crisis management too often amounts to radio silence or contradictory statements, this approach stands in sharp contrast. Some observers are already calling it a “bullish hack”<\/strong> \u2014 a provocative phrase meant to highlight that a well-handled crisis can paradoxically strengthen a protocol’s credibility with institutional investors and advanced users alike.<\/p>\n\n\n\n

NEAR: What Impact on the Token and Ecosystem Confidence?<\/h2>\n\n\n\n

Markets reacted with restraint. The NEAR<\/strong> token faced immediate selling pressure when the hack was announced<\/a> \u2014 the market’s classic knee-jerk reaction to this kind of event. But the speed of the team’s response limited the drawdown, preventing the brutal collapse typically seen when exploits are poorly managed.<\/p>\n\n\n\n

The real medium-term question is one of TVL (Total Value Locked)<\/strong> on NEAR Intents. A hack, even a well-handled one, leaves a mark on risk perception. Market makers and liquidity providers will be reassessing their exposure to the protocol over the coming weeks. Whether TVL holds or recovers will be the true measure of restored confidence.<\/p>\n\n\n\n

For the broader NEAR<\/strong> ecosystem, this incident highlights a structural challenge: cross-chain interoperability multiplies the attack surface. As NEAR continues to push its chain abstraction<\/strong> agenda \u2014 with Chain Abstraction<\/strong> as a core strategic pillar \u2014 the security of these infrastructure layers becomes an existential concern. Regular security audits and robust bug bounty programs are no longer optional: they are the non-negotiable foundation of long-term credibility.<\/a><\/p>\n\n\n\n

\n\n\n\n

Related articles :<\/h3>\n\n\n\n