入门

NEAR Intents $3.8M Exploit: Vulnerability Fixed, All Funds Recovered

2026-10-17 · wublock123.com · source

入门下载费率

Quick answer

NEAR Intents confirmed a $3.8 million exploit on October 17, 2026, caused by a smart contract vulnerability that allowed attackers to generate false deposit records. No user funds were lost: the protocol recovered 100% of the stolen assets before any irreversible outflow occurred. The incident did not impact NEAR Protocol’s core chain, validator set, or consensus layer — only the Intents application layer. Recovery was executed through on-chain governance coordination and manual intervention by the team (Source: wublock123.com, 2026-10-17).

What triggered the $3.8 million exploit?

A logic flaw in NEAR Intents’ deposit verification module permitted forged deposit proofs. Attackers exploited this to mint synthetic deposit receipts without transferring actual assets. These fake receipts were accepted as valid collateral for yield-bearing positions and cross-chain swaps. The vulnerability existed in an off-chain signature validation path where cryptographic proof verification failed to enforce strict asset ownership checks. The issue was not in NEAR’s underlying VM or account model but in Intents’ custom deposit abstraction layer. No third-party audit report or timeline for the vulnerability’s introduction was published in the source (Source: wublock123.com, 2026-10-17).

How did this affect assets, users, and market participants?

The exploit targeted the NEAR Intents ecosystem exclusively — not NEAR tokens (NEAR), staking derivatives, or wrapped assets on other chains. NEAR price showed no statistically significant deviation on Binance or Bybit spot markets during the 4-hour window between detection and recovery announcement (per CoinGecko OHLCV data, 2026-10-17). Wallets holding NEAR Intents–issued tokens (e.g., iUSDC, iETH) experienced temporary balance inflation visible on explorers like NearScan, but no real-world redemption occurred. Liquidity providers on NEAR-based DEXs like Trisolaris reported no abnormal slippage or arbitrage pressure. Custodial platforms such as binance.com and OKX did not suspend NEAR or related token deposits or withdrawals. The event did not trigger any regulatory filing with the U.S. SEC, MAS, or HKMA as of the disclosure date.

What remains uncertain — and why does it matter?

Two material uncertainties persist: First, the exact version number and commit hash of the vulnerable contract are unlisted in the public disclosure. Second, the source does not specify whether the fix involved a full contract redeployment or a proxy upgrade — affecting composability with dependent protocols. Neither the NEAR Foundation nor Intents has published a post-mortem timeline covering detection latency, internal response SLA adherence, or auditor engagement status. This opacity limits third-party risk modeling for integrators relying on Intents as an intent-centric infrastructure layer. Market structure implications remain narrow: no systemic contagion was observed across L1s or intent-focused stacks (e.g., Particle Network, Chainway), per on-chain flow analysis from Arkham Intelligence’s 2026-10-17 snapshot.

Frequently asked questions

Q: Was NEAR Protocol itself compromised? A: No. The exploit affected only NEAR Intents — a separate application built on NEAR. NEAR’s consensus, RPC endpoints, and validator operations remained fully functional and uncompromised (Source: wublock123.com, 2026-10-17).

Q: Can users still interact with NEAR Intents today? A: Yes. The service resumed normal operations following the patch and fund recovery. Users may access NEAR Intents via its official interface at intents.near.org. For context on how intent-based architectures differ from traditional transaction models, see our glossary entry on intent-centric systems.

Risk warning and disclosure

Investing involves risk and market risk; official live rules always apply. Some outbound links may be affiliate links and we may earn a commission. This article is independent third-party information, not an official publication, and is not investment advice.