Key Takeaways
- • NEAR Intents identified the hacker responsible for a $3.8 million exploit occurring on October 1, 2026, and issued a 48-hour ultimatum for return of stolen funds via responsible disclosure framework.
- • The attacker moved approximately $3.8 million in stolen cryptocurrency and subsequently sent small test amounts to a recovery address while requesting contact via Signal messenger, signaling potential negotiation willingness.
- • Approximately 76% of stolen funds were converted to Bitcoin, with the remainder routed through KuCoin and other cryptocurrency exchanges, complicating recovery efforts across multiple blockchain networks.
- • NEAR Intents has committed to full reimbursement of affected users despite the security breach, and the incident occurred days after the protocol had assisted in blocking funds related to the separate Bitget hack, raising questions about operational focus during elevated security conditions.
- • The exploit resulted from an "Omni bug" affecting deposits and withdrawals across multiple blockchain networks including Bitcoin, BNB Chain, Ethereum, and Solana, requiring a temporary pause to the cross-chain trading system.
Summary
The NEAR Intents team identified the individual responsible for a $3.8 million exploit that occurred on October 1, 2026, and issued a formal 48-hour deadline for return of the stolen assets. According to the primary source and corroborating publisher reports, the hacker moved approximately $3.8 million in cryptocurrency and subsequently sent small test amounts to a recovery address while requesting contact through Signal messenger. The responsible disclosure framework employed by NEAR Intents signals an attempt to negotiate recovery without immediate law enforcement escalation, though the team has reported the incident to authorities.
The stolen funds were distributed across multiple blockchain networks and cryptocurrency exchanges. Analysis indicates that approximately 76% of the $3.8 million was converted to Bitcoin, with remaining portions routed through KuCoin and other platforms. This multi-chain dispersal across Bitcoin, BNB Chain, Ethereum, and Solana increased the complexity of tracing and recovering the assets. The exploit itself stemmed from an "Omni bug" that affected the protocol's deposit and withdrawal functionality, prompting NEAR Intents to pause cross-chain trading operations pending remediation.
The timing of this incident carries additional significance within the broader cryptocurrency ecosystem context. NEAR Intents had recently assisted in blocking funds associated with the separate Bitget hack, making the protocol itself vulnerable to exploit just days after engaging in industry-wide recovery efforts. Despite the security breach, NEAR Intents has committed to providing full reimbursement to affected users, mitigating direct losses for the user base while the recovery team pursues return of the stolen funds. As of October 2, 2026, the cryptocurrency market showed mixed movement, with 40 of 50 major cryptocurrencies rising, though the NEAR Intents incident reflects ongoing security challenges within cross-chain trading infrastructure.
The stolen funds were distributed across multiple blockchain networks and cryptocurrency exchanges. Analysis indicates that approximately 76% of the $3.8 million was converted to Bitcoin, with remaining portions routed through KuCoin and other platforms. This multi-chain dispersal across Bitcoin, BNB Chain, Ethereum, and Solana increased the complexity of tracing and recovering the assets. The exploit itself stemmed from an "Omni bug" that affected the protocol's deposit and withdrawal functionality, prompting NEAR Intents to pause cross-chain trading operations pending remediation.
The timing of this incident carries additional significance within the broader cryptocurrency ecosystem context. NEAR Intents had recently assisted in blocking funds associated with the separate Bitget hack, making the protocol itself vulnerable to exploit just days after engaging in industry-wide recovery efforts. Despite the security breach, NEAR Intents has committed to providing full reimbursement to affected users, mitigating direct losses for the user base while the recovery team pursues return of the stolen funds. As of October 2, 2026, the cryptocurrency market showed mixed movement, with 40 of 50 major cryptocurrencies rising, though the NEAR Intents incident reflects ongoing security challenges within cross-chain trading infrastructure.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.