NEAR Intents says it has identified the person responsible for a security incident that drained approximately $3.8 million in user funds, giving the suspected attacker 48 hours to return the assets under a “responsible disclosure” arrangement.
Alex Shevchenko, general manager of NEAR Intents, addressed the suspected hacker directly in an X post on Friday, writing, “We have identified you, sir.” He also published three wallet addresses designated to receive Bitcoin, BNB and Solana.
Shevchenko urged the individual to return the stolen funds, emphasizing that the 48-hour period represents the final opportunity to resolve the incident through responsible disclosure.
The incident was detected Thursday, prompting NEAR Intents to temporarily suspend its services while the team investigated what it described as a bug involving the interaction between the Omni deposit and withdrawal infrastructure and the NEAR Intents smart contract.
According to the protocol’s preliminary assessment, the vulnerability resulted in roughly $3.8 million in user funds being taken. NEAR Intents has said it will fully compensate users affected by the incident.
Blockchain investigator ZachXBT separately reported that the stolen assets were moved to the KuCoin exchange before being bridged to the Bitcoin network, adding another layer to the fund-tracing effort
