decrypt.coarticle'We Have Identified You, Sir': Near Intents Recovers $3.8 Million After 48-Hour Ultimatum
NEAR Intents, a cross-chain swap protocol, suffered a $3.8M exploit caused by a bug in how its Omni deposit/withdrawal layer interacted with its main smart contract. General manager Alex Shevchenko publicly identified the attacker, gave a 48-hour ultimatum to return the funds as a last-chance responsible-disclosure offer, and the full amount was returned after an on-chain apology message. The stolen funds had briefly moved through KuCoin and were bridged to Bitcoin, traced by ZachXBT; separately, days earlier NEAR Intents had blocked a $50M swap attempt tied to the DPRK-linked Bitget hacker.
TL;DR NEAR Intents recovered its full $3.8M exploit loss after publicly threatening to identify the attacker, who returned funds and apologized on-chain.
Technologies named here
Techniques named here
- Smart contract/deposit-withdrawal layer exploit
- Onchain fund tracing
- Public attribution/naming pressure
Threat actors named here
- Unnamed exploiter
- North Korea-linked hacker
- DPRK
Also named here
- Alex Shevchenko
Related in Blockchain
blog.thorchain.orgwriteupTHORChain Exploit Report #2 — GG20 root-cause disclosure
protos.comarticleBlack Thursday revisited: MakerDAO keeper exploited for $500K
.jpg)
aikido.devwriteupGraphalgo campaign spreads to Terraform providers and Go Modules
sundaytimes.lkarticle