NEAR Intents suffers $3.8 million exploit amid ongoing wave of crypto hacks

In early 2024, the decentralized finance (DeFi) ecosystem was shaken once again when a major security breach hit the NEAR Intents protocol, a widely used cross‑chain trading system built on the NEAR blockchain. The attack resulted in the loss of approximately $3.8 million worth of digital assets, adding to a string of high‑profile hacks that have plagued the cryptocurrency sector over the past year.

While the incident exposed a critical bug that affected both deposits and withdrawals across several networks, the NEAR Intents team quickly moved to mitigate the damage and reassure its community by pledging to reimburse affected users. ### Background on NEAR Intents NEAR Intents was launched as a bridge‑like service that enables users to move tokens seamlessly between different blockchain networks without relying on centralized exchanges. By leveraging smart contracts on the NEAR platform, the protocol promised fast finality, low transaction fees, and a user‑friendly interface for swapping assets across ecosystems such as Ethereum, Binance Smart Chain, Polygon, and others. Its popularity grew rapidly, attracting both retail traders and institutional participants who valued the ability to execute cross‑chain trades in a single transaction flow.

### The Exploit The vulnerability that led to the $3.8 million loss was discovered by an unknown attacker who exploited a flaw in the contract logic governing deposit and withdrawal operations. According to the forensic analysis released by the NEAR Intents security team, the bug allowed the attacker to manipulate the state of pending transactions, effectively double‑spending funds that had already been earmarked for withdrawal. The exploit was executed over a short window of time, during which the attacker was able to siphon assets from multiple user accounts across three different blockchain networks. Key technical details of the breach include: 1.

**State‑Manipulation Bug**: The smart contract failed to correctly lock the balance of a user’s deposit before processing a withdrawal request. This oversight created a race condition that could be triggered by a specially crafted transaction sequence. 2. **Cross‑Chain Propagation**: Because NEAR Intents operates as a hub that coordinates token movements between chains, the compromised contract propagated the erroneous state changes to the connected bridges, amplifying the impact.

3. **Insufficient Re‑Entrancy Guard**: The contract lacked robust re‑entrancy protection, a common safeguard in DeFi smart contracts that prevents malicious contracts from repeatedly calling back into a vulnerable function. The attack was detected by the platform’s monitoring tools within minutes, prompting an immediate freeze of all outbound transactions.

The team then initiated a comprehensive audit to pinpoint the exact cause and assess the total amount of compromised funds. ### Immediate Response and User Compensation Upon confirming the breach, NEAR Intents issued a public statement acknowledging the incident and outlining its remediation plan. The statement highlighted three primary actions: - **Transaction Freeze**: All pending withdrawals were halted to prevent further loss while the investigation continued. - **Security Audit**: An external cybersecurity firm was engaged to perform a full code review and identify any additional vulnerabilities.

- **User Reimbursement**: The protocol committed to reimbursing every user who suffered a loss as a direct result of the exploit. To fund the compensation, the team allocated reserves from its treasury and announced a temporary reduction in protocol fees to replenish the pool. The reimbursement process is being carried out on a case‑by‑case basis. Affected users are required to submit proof of loss through a designated portal, after which the NEAR Intents team verifies the claim and transfers the equivalent value in NEAR tokens or a stablecoin of the user’s choice.

The platform has set a deadline of 90 days for claim submissions to ensure a swift resolution. ### Broader Implications for the Crypto Industry The NEAR Intents exploit underscores several persistent challenges facing the decentralized finance space: - **Complexity of Cross‑Chain Solutions**: While bridging assets between blockchains offers tremendous utility, it also introduces additional attack vectors. Each additional connection point expands the attack surface, making thorough security audits essential.

- **Rapid Development vs. Security**: The pressure to launch innovative features quickly can sometimes lead to shortcuts in code review and testing. The NEAR Intents incident serves as a reminder that rigorous formal verification and third‑party audits should be integral to the development lifecycle. - **User Trust and Compensation Models**: By offering full reimbursement, NEAR Intents is attempting to rebuild confidence among its users.

However, the sustainability of such compensation mechanisms depends on the protocol’s ability to maintain sufficient reserves and generate ongoing revenue. ### Steps Forward for NEAR Intents In the aftermath of the breach, the NEAR Intents team has outlined a roadmap aimed at strengthening the platform’s security posture and restoring community trust: 1.

**Comprehensive Code Refactor**: The vulnerable contract will be rewritten from the ground up, incorporating industry‑standard patterns for state management and re‑entrancy protection. 2. **Formal Verification**: The new code will undergo formal verification using tools such as Certora and Solidity‑Formal to mathematically prove the absence of certain classes of bugs.

3. **Bug Bounty Expansion**: NEAR Intents plans to increase the rewards for its public bug bounty program, encouraging independent security researchers to scrutinize the platform. 4. **Transparency Dashboard**: A real‑time dashboard will be launched to display metrics on contract health, pending transactions, and any ongoing security incidents, providing users with greater visibility.

5. **Community Governance Involvement**: Token holders will be invited to vote on key security upgrades and the allocation of funds for future audits, ensuring that the protocol’s evolution aligns with stakeholder interests. ### Conclusion The $3.8 million exploit that struck NEAR Intents adds to a growing list of high‑profile DeFi hacks that have highlighted the fragility of cross‑chain infrastructure. While the incident was undoubtedly a setback, the platform’s swift response—freezing transactions, engaging external auditors, and pledging full reimbursement—demonstrates a commitment to user protection and accountability.

Moving forward, the emphasis on rigorous security practices, formal verification, and transparent governance will be crucial for NEAR Intents to regain momentum and continue offering a reliable bridge for the burgeoning multi‑chain ecosystem. For users and investors, the episode serves as a cautionary tale: always conduct due diligence, diversify risk, and stay informed about the security measures employed by the platforms they rely on. As the DeFi landscape matures, the industry as a whole will need to balance rapid innovation with the uncompromising need for robust, battle‑tested security.