NEAR Intents, the cross-chain transaction layer built on the NEAR Protocol, said it has identified the attacker behind a $3.8 million exploit and issued a 48-hour ultimatum to return the funds. The protocol went public with the identification but has not yet disclosed the method or any on-chain evidence underpinning the claim.
Why it matters
The 48-hour public clock is a pressure tactic that has become common in recent high-profile exploits, but the framing here has shifted from negotiation to confrontation. Naming the attacker publicly puts a timer on legal exposure, especially if the wallet cluster ties back to a KYC'd venue. NEAR's track record matters: the team has previously worked with centralized exchanges and law enforcement to freeze and reclaim stolen assets, which gives the deadline real weight rather than empty posturing.
Market impact
For NEAR, the $3.8 million figure is a small slice of the protocol's TVL, so direct contagion to the NEAR token is unlikely. The bigger read is the template: public identification followed by a hard clock is the playbook more projects are likely to copy, narrowing the window for attackers to launder funds before facing coordinated on-chain and legal pursuit.
Frequently asked questions
-
How much was stolen in the NEAR Intents exploit?
$3.8 million, according to NEAR Intents' own disclosure of the incident.
-
What did NEAR Intents demand from the attacker?
Return the stolen funds within 48 hours of the public identification, or face further action.
-
How did NEAR Intents identify the hacker?
The protocol said it identified the attacker but did not yet disclose the method or the on-chain evidence behind the claim.
-
What happens if the attacker does not return the funds?
The next move is likely law enforcement referrals, exchange-level freezes, and on-chain pursuit rather than further negotiation.
-
How does the exploit affect the NEAR token?
$3.8M is small relative to NEAR's TVL, so direct contagion is limited. The bigger signal is the precedent for public identification plus a hard deadline.
CoinTelegraph