In early 2024, the cryptocurrency community was shaken by a large‑scale hacking incident that targeted Bitget, one of the world’s leading digital‑asset exchange platforms. The breach, which quickly garnered attention across forums, social media, and security bulletins, involved a sophisticated group of attackers who managed to gain access to a substantial amount of user funds.
According to the latest forensic analysis, the hackers attempted to move more than $50 million worth of crypto assets through a series of rapid, automated swaps designed to obscure the trail and launder the stolen coins. The first line of defense against this massive outflow came from Near Intents, a decentralized protocol that offers a suite of smart‑contract‑based services for token swapping, liquidity provision, and transaction routing. Near Intents’ monitoring systems flagged an unusual spike in swap requests originating from addresses linked to the Bitget breach. Within minutes, the protocol’s automated risk engine identified the pattern as highly suspicious, matching it against known signatures of money‑laundering behavior and previous hacking campaigns.
Once the alerts were triggered, Near Intents’ security team initiated a multi‑step response. The initial step involved automatically rejecting any swap transaction that exceeded a predefined risk threshold, effectively freezing the flow of assets. In total, the platform blocked over $50 million in attempted transfers.
The blocked funds were held in escrow within Near Intents’ smart contracts, preventing them from being converted into other tokens or moved to external wallets. While the immediate impact of the block was significant, the story did not end there. After the initial rejection, many of the attackers attempted to reroute the same funds through alternative swapping services and decentralized exchanges (DEXs).
The attackers employed a technique known as “transaction hopping,” where they split the stolen assets into smaller parcels and sent them through multiple hops across different protocols in an effort to evade detection. Near Intents’ analytics showed that a sizable portion of the blocked assets—approximately 30 percent—were later observed moving through other liquidity providers, including some lesser‑known DEX aggregators and cross‑chain bridges.
The fact that the majority of the funds were still intercepted underscores the importance of real‑time monitoring and rapid response in the crypto ecosystem. By acting swiftly, Near Intents not only prevented a direct loss of value on its own platform but also contributed to a broader deterrent effect. The blocked assets, while temporarily held, were later returned to a secure custodial address managed by a consortium of reputable custodians, ensuring that the funds could be recovered and potentially returned to the rightful owners once the legal and investigative processes concluded.
The incident sparked a wave of discussion among security experts about the evolving tactics of cybercriminals in the decentralized finance (DeFi) space. One notable observation was the attackers’ reliance on automated bots that could generate and broadcast swap transactions within milliseconds. These bots are programmed to exploit any latency in detection systems, making it crucial for platforms like Near Intents to maintain low‑latency monitoring pipelines and to continuously update their threat models. In response to the breach, Near Intents announced several enhancements to its security infrastructure.
These include the integration of machine‑learning models that can predict anomalous transaction patterns based on historical data, the deployment of additional on‑chain analytics nodes to reduce data latency, and the establishment of a rapid‑response task force that collaborates directly with exchange security teams and law‑enforcement agencies. The protocol also rolled out an incentive program for white‑hat researchers, offering bounties for the discovery of vulnerabilities or for the submission of actionable intelligence regarding ongoing attacks.
From a broader perspective, the Bitget hack and Near Intents’ intervention highlight the interconnected nature of modern crypto ecosystems. A breach on a centralized exchange can quickly cascade into the decentralized realm, where assets can be moved across multiple chains and platforms in a matter of seconds.
This interdependence calls for a unified approach to security, where centralized exchanges, DEXs, liquidity aggregators, and blockchain analytics firms share threat intelligence and coordinate defensive measures. Regulators have also taken note of the incident. Several jurisdictions are reviewing their existing frameworks for crypto‑asset custodianship and anti‑money‑laundering (AML) compliance. The goal is to ensure that both on‑chain and off‑chain entities adhere to stringent reporting standards, making it harder for illicit actors to hide behind the anonymity that blockchain technology can provide.
In conclusion, the Near Intents episode serves as a case study in effective, real‑time defense against large‑scale crypto theft. By detecting, blocking, and partially rerouting over $50 million in attempted swaps, the protocol demonstrated that proactive security measures can significantly mitigate the damage caused by sophisticated hacking operations.
The incident also underscores the necessity for continuous innovation in monitoring tools, cross‑industry collaboration, and regulatory alignment to safeguard the integrity of the rapidly expanding digital‑asset landscape. As the crypto sector continues to mature, the lessons learned from this event will likely shape the next generation of security protocols, ensuring that both users and platforms are better protected against future threats.