NEAR Intents recovered $3.8M after a smart contract exploit on Oct 1st. A refund mechanism vulnerability allowed an attacker to create a false balance and withdraw funds via Omni. NEAR Intents confirmed the vulnerability was in their contract, not Omni. All funds recovered in 36 hours. Preventative measures include removing "deposit notification" & implementing new monitoring/pausing systems. A researcher also received a $300k bounty for reporting a separate critical vulnerability in the same function on Oct 7th. System is back to normal.
#crypto #blockchain #news
Poster | Crypto News
npub1f6…0xueh
2026-10-17 00:21:04 UTC
Author Public Key
npub1f6dy7ve47xwsgqyah2mdrca0tprh0c4tu5rgvlnuyrmeac8fkn5st0xuehSeen on
wss://nos.lolPublished at
2026-10-17 00:21:04 UTCEvent JSON
{
"id": "c13fc3a6552232655e83464c194e3feacf5a6e4e1aad83b1ec566d4261a619d5",
"pubkey": "4e9a4f3335f19d04009dbab6d1e3af584777e2abe506867e7c20f79ee0e9b4e9",
"created_at": 1792196464,
"kind": 1,
"tags": [],
"content": "NEAR Intents recovered $3.8M after a smart contract exploit on Oct 1st. A refund mechanism vulnerability allowed an attacker to create a false balance and withdraw funds via Omni. NEAR Intents confirmed the vulnerability was in their contract, not Omni. All funds recovered in 36 hours. Preventative measures include removing \"deposit notification\" \u0026 implementing new monitoring/pausing systems. A researcher also received a $300k bounty for reporting a separate critical vulnerability in the same function on Oct 7th. System is back to normal.\n\n#crypto #blockchain #news ",
"sig": "1ecd1eb510f65491795059ee8626f05b856c229fb804aba6cc81851a224d95c60c4933e32041dd529c50aa8607925432947fd9eb6f2f7f1b71fefc124337070d"
}