News Heat Trend
Project Overview
NEAR Intents is a multi-chain financial product protocol based on NEAR, designed to provide a seamless way to transfer value to users, AI agents, and services.
NEAR co-founders share ecosystem application development directions and distribution strategies, covering AI, cross-chain payments, private transactions, and other focus areas.
NEAR co-founder Illia Polosukhin posted that the recent increase in developer activity and further reduction in development barriers within the ecosystem center on what applications to build and how to establish distribution channels. In response, he proposed a series of potential building directions, including AI virtual pets combining NEAR AI’s on-chain verifiable inference with non-fungible tokens (NFTs); a universal checkout component supporting cross-chain intent payments; a decentralized encyclopedia integrating prediction markets with AI-generated content; a privacy-oriented OTC market based on NEAR Intents, alongside liquidation-resistant lending and perpetual contract management; a cross-chain event registration escrow tool backed by staking deposits; a privacy-preserving code review agent; a corporate cap table management tool; Delta-neutral strategy management; private copy trading utilizing view keys; an end-to-end encrypted medical auxiliary diagnostic system; a privacy-focused voice transcription desktop application; and AI benchmarking based on private test sets, among others.
The $3.8 million in stolen NEAR Intents funds has been fully recovered.
Alex Shevchenko, General Manager of NEAR Intents, stated that just hours after issuing a 48-hour return deadline to the identified attacker, the $3.8 million stolen from NEAR Intents has been fully refunded. The team has halted its investigation and is calling on security researchers to report issues through a bug bounty program in the future, rather than disrupting network services.
NEAR Intents Claims It Has Confirmed the Hacker's Identity, Demands Return of $3.8 Million in Stolen Funds Within 48 Hours
According to Cointelegraph, Alex Shevchenko, General Manager of NEAR Intents, stated that the team has identified the hackers behind the previous security incident and given them a 48-hour deadline to return the stolen funds through a "responsible disclosure." NEAR Intents previously suspended its services due to a vulnerability in the interaction between the Omni deposit and withdrawal infrastructure and its smart contracts. Initial investigations revealed that approximately $3.8 million in user funds were stolen in the incident, and the team has committed to fully compensating affected users. On-chain detective ZachXBT stated that the stolen funds were subsequently transferred to KuCoin and cross-chain converted into Bitcoin.
NEAR Intents Hit by $3.8 Million Exploit, Gives Hacker 48 Hours to Return Funds
Odaily News: NEAR Intents has stated that it has identified the attacker responsible for the loss of user funds and has demanded the return of $3.8 million within 48 hours through a "responsible disclosure" mechanism, after which the window will be closed.NEAR Intents suspended services on Thursday after discovering a vulnerability in the interaction between the Omni deposit and withdrawal infrastructure and its smart contracts. A preliminary investigation showed that the attack resulted in the theft of $3.8 million in user funds, and the platform has committed to fully compensating affected users.On-chain investigator ZachXBT disclosed that the related funds were transferred to the KuCoin exchange and subsequently bridged to Bitcoin. (Cointelegraph)
$388 Million in Crypto Assets Stolen, Bitget CEO Says Full Recovery Unlikely
Odaily News — Gracy Chen, CEO of cryptocurrency exchange Bitget, said the company is not optimistic about recovering the $388 million in crypto assets lost in last week's security incident. Citing the Bybit hack in 2025 as a reference, she noted that approximately one year after that incident, only about 3.5% of the stolen funds had been frozen, and that this does not equate to a completed recovery.Bitget has set up a bounty program offering 5% rewards for frozen funds and recovered funds respectively. The NEAR Intents team said it has intercepted over $50 million in assets related to the attack and frozen approximately $500,000. Tether and Circle have blacklisted the relevant wallets, freezing $318,000 worth of USDT and USDC.Gracy Chen stated that preliminary investigations indicate the attack may match VPN addresses used by North Korea-linked groups, but Bitget has not yet fully ruled out the possibility of an insider job. Bitget has resumed withdrawals in phases, starting with Bitcoin transactions on Monday and continuing with ETH transactions on Tuesday. (Cointelegraph)
NEAR Intents Claims It Has Confirmed the Hacker's Identity, Demands Return of $3.8 Million in Stolen Funds Within 48 Hours
According to Cointelegraph, Alex Shevchenko, General Manager of NEAR Intents, stated that the team has identified the hackers behind the previous security incident and given them a 48-hour deadline to return the stolen funds through a "responsible disclosure." NEAR Intents previously suspended its services due to a vulnerability in the interaction between the Omni deposit and withdrawal infrastructure and its smart contracts. Initial investigations revealed that approximately $3.8 million in user funds were stolen in the incident, and the team has committed to fully compensating affected users. On-chain detective ZachXBT stated that the stolen funds were subsequently transferred to KuCoin and cross-chain converted into Bitcoin.
NEAR Intents Hit by $3.8 Million Exploit, Gives Hacker 48 Hours to Return Funds
Odaily News: NEAR Intents has stated that it has identified the attacker responsible for the loss of user funds and has demanded the return of $3.8 million within 48 hours through a "responsible disclosure" mechanism, after which the window will be closed.NEAR Intents suspended services on Thursday after discovering a vulnerability in the interaction between the Omni deposit and withdrawal infrastructure and its smart contracts. A preliminary investigation showed that the attack resulted in the theft of $3.8 million in user funds, and the platform has committed to fully compensating affected users.On-chain investigator ZachXBT disclosed that the related funds were transferred to the KuCoin exchange and subsequently bridged to Bitcoin. (Cointelegraph)
$388 Million in Crypto Assets Stolen, Bitget CEO Says Full Recovery Unlikely
Odaily News — Gracy Chen, CEO of cryptocurrency exchange Bitget, said the company is not optimistic about recovering the $388 million in crypto assets lost in last week's security incident. Citing the Bybit hack in 2025 as a reference, she noted that approximately one year after that incident, only about 3.5% of the stolen funds had been frozen, and that this does not equate to a completed recovery.Bitget has set up a bounty program offering 5% rewards for frozen funds and recovered funds respectively. The NEAR Intents team said it has intercepted over $50 million in assets related to the attack and frozen approximately $500,000. Tether and Circle have blacklisted the relevant wallets, freezing $318,000 worth of USDT and USDC.Gracy Chen stated that preliminary investigations indicate the attack may match VPN addresses used by North Korea-linked groups, but Bitget has not yet fully ruled out the possibility of an insider job. Bitget has resumed withdrawals in phases, starting with Bitcoin transactions on Monday and continuing with ETH transactions on Tuesday. (Cointelegraph)
B² Network Suffers Hacker Attack, Losses Approximately $3.86 Million
According to on-chain analyst Specter, B² Network on BNB Chain suffered a hack, resulting in a loss of approximately 8.591 million B2 tokens (approximately $3.86 million). The attacker swapped them for 5409 WBNB (approximately $3.11 million) and bridged to Ethereum, and is currently transferring the funds to Zcash via NEAR Intents.
The Zcash development team plans to assign a unique viewing key for each ZEC cross-chain swap to mitigate future quantum computing risks.
According to CoinDesk, the development team behind Zcash's new node software, Zakura, plans to generate a unique viewing key for each ZEC swap conducted via NEAR Intents, while the spending key remains secured by the user's primary account. Under the current architecture, when users swap private ZEC for USDC via NEAR Intents, one of their Zcash privacy addresses is publicly broadcast on the NEAR public chain as a refund address and remains retained after the swap is completed. While this address currently does not leak information, sufficiently powerful quantum computers in the future could potentially reverse-engineer the viewing key using Shor's algorithm, thereby linking all payments received by that account, including amounts and memos. By implementing a "one-key-per-swap" approach, even if a refund address is compromised, attackers will only be able to view payments related to that specific swap. To address the issue of having to scan the entire blockchain sequentially during wallet recovery due to an abundance of keys, Zakura employs Private Information Retrieval (PIR) technology, allowing the wallet to query the location of incoming refunds without the database learning which address was queried.
NEAR Intents releases post-mortem on the October 1 vulnerability incident: $3.8 million in funds fully recovered, deposit notification feature removed
In a postmortem article published by Alex Shevchenko (@AlexAuroraDev), lead of NEAR Intents, a vulnerability was identified in the NEAR Intents contract's deposit notification mechanism when interacting with third-party contracts. The attacker deployed a contract that caused the notification call to fail, triggering the token contract to refund the deposits while the NEAR Intents contract retained the deposit records. Through 23 failed deposit transactions, the attacker generated approximately $3.8 million in "phantom funds," which were subsequently withdrawn to external chains via Omni infrastructure. This vulnerability resided in the NEAR Intents contract rather than in the Omni infrastructure. The timeline indicates the attack occurred between September 29 and October 1. The team detected withdrawal anomalies on October 1 and paused the contract within 29 minutes. Thanks to collaboration between the SHIELD security layer, on-chain tracking efforts, and industry security researchers, the attacker fully returned the funds on October 2, and all affected users have been compensated. The postmortem highlighted that existing monitoring only tracked discrepancies between aggregate token balances on the source chain versus NEAR, failing to monitor the mismatch between total user balances and contract token balances. This oversight allowed the attack to proceed undetected for several days. For remediation, the team has completely disabled the deposit notification functionality and implemented new monitoring for discrepancies between total user balances and contract balances. If this invariant is violated, the contract will automatically pause. On October 7, white hat research
The $3.8 million in stolen NEAR Intents funds has been fully recovered.
Alex Shevchenko, General Manager of NEAR Intents, stated that just hours after issuing a 48-hour return deadline to the identified attacker, the $3.8 million stolen from NEAR Intents has been fully refunded. The team has halted its investigation and is calling on security researchers to report issues through a bug bounty program in the future, rather than disrupting network services.
NEAR Intents Claims It Has Confirmed the Hacker's Identity, Demands Return of $3.8 Million in Stolen Funds Within 48 Hours
According to Cointelegraph, Alex Shevchenko, General Manager of NEAR Intents, stated that the team has identified the hackers behind the previous security incident and given them a 48-hour deadline to return the stolen funds through a "responsible disclosure." NEAR Intents previously suspended its services due to a vulnerability in the interaction between the Omni deposit and withdrawal infrastructure and its smart contracts. Initial investigations revealed that approximately $3.8 million in user funds were stolen in the incident, and the team has committed to fully compensating affected users. On-chain detective ZachXBT stated that the stolen funds were subsequently transferred to KuCoin and cross-chain converted into Bitcoin.
NEAR Intents Hit by $3.8 Million Exploit, Gives Hacker 48 Hours to Return Funds
Odaily News: NEAR Intents has stated that it has identified the attacker responsible for the loss of user funds and has demanded the return of $3.8 million within 48 hours through a "responsible disclosure" mechanism, after which the window will be closed.NEAR Intents suspended services on Thursday after discovering a vulnerability in the interaction between the Omni deposit and withdrawal infrastructure and its smart contracts. A preliminary investigation showed that the attack resulted in the theft of $3.8 million in user funds, and the platform has committed to fully compensating affected users.On-chain investigator ZachXBT disclosed that the related funds were transferred to the KuCoin exchange and subsequently bridged to Bitcoin. (Cointelegraph)
NEAR Governance Forum Proposes Reducing Token Issuance Rate from 2.5% to 1.6% Over 24 Months
Odaily News: A new proposal has been submitted on the NEAR governance forum by Sal Ternullo, CEO of Svrn AI, recommending that the NEAR token issuance rate be reduced from 2.5% to 1.6% over 24 months, with a long-term push toward a fixed total supply. The proposal is currently open for discussion among validators, House of Stake representatives, and the broader NEAR community.The NEAR team stated that the NEAR Intents incident did not involve any vulnerability in NEAR Protocol or the native NEAR token. The network continued producing blocks and processing transactions without downtime during the period.
The Zcash development team plans to assign a unique viewing key for each ZEC cross-chain swap to mitigate future quantum computing risks.
According to CoinDesk, the development team behind Zcash's new node software, Zakura, plans to generate a unique viewing key for each ZEC swap conducted via NEAR Intents, while the spending key remains secured by the user's primary account. Under the current architecture, when users swap private ZEC for USDC via NEAR Intents, one of their Zcash privacy addresses is publicly broadcast on the NEAR public chain as a refund address and remains retained after the swap is completed. While this address currently does not leak information, sufficiently powerful quantum computers in the future could potentially reverse-engineer the viewing key using Shor's algorithm, thereby linking all payments received by that account, including amounts and memos. By implementing a "one-key-per-swap" approach, even if a refund address is compromised, attackers will only be able to view payments related to that specific swap. To address the issue of having to scan the entire blockchain sequentially during wallet recovery due to an abundance of keys, Zakura employs Private Information Retrieval (PIR) technology, allowing the wallet to query the location of incoming refunds without the database learning which address was queried.
NEAR Intents releases post-mortem on the October 1 vulnerability incident: $3.8 million in funds fully recovered, deposit notification feature removed
In a postmortem article published by Alex Shevchenko (@AlexAuroraDev), lead of NEAR Intents, a vulnerability was identified in the NEAR Intents contract's deposit notification mechanism when interacting with third-party contracts. The attacker deployed a contract that caused the notification call to fail, triggering the token contract to refund the deposits while the NEAR Intents contract retained the deposit records. Through 23 failed deposit transactions, the attacker generated approximately $3.8 million in "phantom funds," which were subsequently withdrawn to external chains via Omni infrastructure. This vulnerability resided in the NEAR Intents contract rather than in the Omni infrastructure. The timeline indicates the attack occurred between September 29 and October 1. The team detected withdrawal anomalies on October 1 and paused the contract within 29 minutes. Thanks to collaboration between the SHIELD security layer, on-chain tracking efforts, and industry security researchers, the attacker fully returned the funds on October 2, and all affected users have been compensated. The postmortem highlighted that existing monitoring only tracked discrepancies between aggregate token balances on the source chain versus NEAR, failing to monitor the mismatch between total user balances and contract token balances. This oversight allowed the attack to proceed undetected for several days. For remediation, the team has completely disabled the deposit notification functionality and implemented new monitoring for discrepancies between total user balances and contract balances. If this invariant is violated, the contract will automatically pause. On October 7, white hat research
NEAR Protocol Announces Support for Post-Quantum Signature Schemes, No Asset Migration Required
NEAR Protocol announced that NEAR accounts now support the post-quantum ML-DSA signature scheme, enabling users to complete key upgrades without any asset migration. Meanwhile, the NEAR One team is advancing the NEP-655 proposal, which derives implicit accounts via an initial state hash, storing assets behind the hash so that no public keys or key hashes are exposed on-chain. It is currently live on the testnet and expected to launch on the mainnet within weeks. Additionally, the team is designing NEAR Intents Wallet Contracts that support custom signature extensions (including ML-DSA and hash-based schemes), and developing a NEAR-based Q-day recovery registry for external chains that have not yet deployed PQ keys, allowing users to submit recovery keys in a rotatable hash format. NEAR noted that its quantum-safe design philosophy was integrated into its architecture planning as early as 2018.
Demand for Centralized Exchanges Is Decreasing; NEAR Will Expand near.com's Fiat and Tokenized Stock Features
Illia Polosukhin stated that as on-chain tools expand, users no longer need centralized exchanges for many crypto activities. near.com integrates cross-chain spot trading, tokenized stocks, yield products, and perpetual contracts into a single interface, and plans to add more fiat-related features, including bank withdrawals, tax transaction records, and selective disclosure for confidential transactions. NEAR has partnered with Monerium to support users in converting between euros in bank accounts and EURe via IBAN, with the ultimate goal of enabling NEAR Intents to support "any asset to any asset" swaps. After integrating Ondo Finance in September, near.com already offers tokenized stocks and plans to add stocks from more global markets; NEAR's Agent Market allows users to describe their needs in natural language, with the platform finding agents capable of executing the task, and funds will be released after the task is completed and verified.
NEAR co-founders share ecosystem application development directions and distribution strategies, covering AI, cross-chain payments, private transactions, and other focus areas.
NEAR co-founder Illia Polosukhin posted that the recent increase in developer activity and further reduction in development barriers within the ecosystem center on what applications to build and how to establish distribution channels. In response, he proposed a series of potential building directions, including AI virtual pets combining NEAR AI’s on-chain verifiable inference with non-fungible tokens (NFTs); a universal checkout component supporting cross-chain intent payments; a decentralized encyclopedia integrating prediction markets with AI-generated content; a privacy-oriented OTC market based on NEAR Intents, alongside liquidation-resistant lending and perpetual contract management; a cross-chain event registration escrow tool backed by staking deposits; a privacy-preserving code review agent; a corporate cap table management tool; Delta-neutral strategy management; private copy trading utilizing view keys; an end-to-end encrypted medical auxiliary diagnostic system; a privacy-focused voice transcription desktop application; and AI benchmarking based on private test sets, among others.
NEAR Co-Founder: NEAR Intents and near.com Restored; Attack Impact Limited to USDT on BSC
Illia Polosukhin stated that the attack involving approximately $3.8 million only affected USDT on BSC. NEAR Intents and near.com are now back online, and affected users will receive full compensation.
Related news
Dragonfly Partner Questions DFINITY's Technical Infringement Allegations: Related Patent Was Only Approved at the End of July
Dragonfly partner Haseeb Qureshi responded via post to DFINITY founder Dominic Williams' earlier allegations that NEAR Intents had unauthorizedly used threshold ECDSA signature technology. Screenshots of the relevant patent application status shared by Qureshi show that the patent was not approved until late July this year, having previously been in a "patent application" state. NEAR Intents modified the relevant algorithm in September this year. Haseeb Qureshi added that, if Dominic Williams' own account is accurate, the alleged patent infringement may have covered only a period of roughly one month. Furthermore, the relevant algorithm was originally published in an academic paper under a CC BY license, which NEAR also referenced in its implementation.
DFINY founder accuses NEAR Intents of using its proprietary threshold signature technology
DFINTIY founder Dominic Williams (@dominic_w) posted on X stating that the key components relied upon by NEAR's Chain Abstraction and Intents utilize the threshold ECDSA algorithm from a paper published by DFINITY in 2022. He stated that the technology was only licensed for use on the Internet Computer, and accused NEAR of recruiting former employees fired by DFINITY in 2021 to lead the relevant work. He further claimed that the algorithm can triple signing speeds compared to other solutions. Williams also questioned the degree of decentralization of NEAR, noting that its related system operates on only 8 servers, while the corresponding solution for the Internet Computer runs on subnets comprising around 50 independent node operators. Citing pull request #4503 and issue #4324 in the NEAR MPC repository on GitHub, he stated that NEAR is attempting to downgrade from a 1-round signing scheme to a slower 3-round scheme. Williams indicated that the matter involves legal considerations, asserting that DFINITY would be willing to share the technology under fair terms if NEAR had sought collaboration beforehand and properly attributed the technology's origin. At present, the post contains only one-sided allegations, with no response yet seen from NEAR, and the related claims have not yet...
DFINITY 创始人指控 NEAR Intents 使用其专有密码学技术，称或涉及知识产权侵权
DFINITY 创始人 Dominic Williams 发文指控，NEAR Intents 的链抽象架构使用了 DFINITY 开发的专有门限 ECDSA 签名技术，相关技术原本仅授权用于 Internet Computer。他称，NEAR 团队可能将相关算法整合至开源门限密码学库，并通过约 8 台服务器运行相关系统，质疑其去中心化程度及用户资产安全性。
NEAR Intents Q3 trading volume approximately $10.4 billion, Confidential Intents TVL grew about 463% quarter-over-quarter
NEAR Intents recorded approximately $10.4 billion in trading volume in Q3, with cumulative fees exceeding $52 million, of which NEAR captured over $8 million. Confidential Intents opened access to developers on July 7, and its TVL at the end of Q3 was approximately $160 million, representing roughly 463% quarter-over-quarter growth.
The Zcash development team plans to assign a unique viewing key for each ZEC cross-chain swap to mitigate future quantum computing risks.
According to CoinDesk, the development team behind Zcash's new node software, Zakura, plans to generate a unique viewing key for each ZEC swap conducted via NEAR Intents, while the spending key remains secured by the user's primary account. Under the current architecture, when users swap private ZEC for USDC via NEAR Intents, one of their Zcash privacy addresses is publicly broadcast on the NEAR public chain as a refund address and remains retained after the swap is completed. While this address currently does not leak information, sufficiently powerful quantum computers in the future could potentially reverse-engineer the viewing key using Shor's algorithm, thereby linking all payments received by that account, including amounts and memos. By implementing a "one-key-per-swap" approach, even if a refund address is compromised, attackers will only be able to view payments related to that specific swap. To address the issue of having to scan the entire blockchain sequentially during wallet recovery due to an abundance of keys, Zakura employs Private Information Retrieval (PIR) technology, allowing the wallet to query the location of incoming refunds without the database learning which address was queried.
NEAR Intents releases post-mortem on the October 1 vulnerability incident: $3.8 million in funds fully recovered, deposit notification feature removed
In a postmortem article published by Alex Shevchenko (@AlexAuroraDev), lead of NEAR Intents, a vulnerability was identified in the NEAR Intents contract's deposit notification mechanism when interacting with third-party contracts. The attacker deployed a contract that caused the notification call to fail, triggering the token contract to refund the deposits while the NEAR Intents contract retained the deposit records. Through 23 failed deposit transactions, the attacker generated approximately $3.8 million in "phantom funds," which were subsequently withdrawn to external chains via Omni infrastructure. This vulnerability resided in the NEAR Intents contract rather than in the Omni infrastructure. The timeline indicates the attack occurred between September 29 and October 1. The team detected withdrawal anomalies on October 1 and paused the contract within 29 minutes. Thanks to collaboration between the SHIELD security layer, on-chain tracking efforts, and industry security researchers, the attacker fully returned the funds on October 2, and all affected users have been compensated. The postmortem highlighted that existing monitoring only tracked discrepancies between aggregate token balances on the source chain versus NEAR, failing to monitor the mismatch between total user balances and contract token balances. This oversight allowed the attack to proceed undetected for several days. For remediation, the team has completely disabled the deposit notification functionality and implemented new monitoring for discrepancies between total user balances and contract balances. If this invariant is violated, the contract will automatically pause. On October 7, white hat research