[NEAR Intents suffered a Lazarus hacker attack causing a loss of $3.86M; the contract has been fixed and full reimbursement is pledged]
NEAR Intents experienced a hacker attack, and on-chain tracking points to North Korea’s Lazarus Group, with direct losses totaling $3.86 million. The attack stemmed from a vulnerability in the interaction between Omni’s deposit/withdrawal infrastructure and smart contracts. After funds were drained from a BSC hot wallet, they were transferred to KuCoin and swapped across chains into BTC. The project team completed the contract vulnerability fix and paused the service within 4 hours, pledging full reimbursement for affected assets. Some public-chain deposit/withdrawal services will be paused for about 12 hours to complete infrastructure remediation. This incident is directly related to cross-chain interactions and infrastructure security within the NEAR ecosystem, and because the funds were ultimately exchanged into BTC, it creates a short-term linkage to BTC-chain fund flows. The key follow-up checkpoints are the reimbursement execution progress and the full restoration of deposit/withdrawal services after the 12-hour pause.
$NEAR $BTC
NEAR Intents experienced a hacker attack, and on-chain tracking points to North Korea’s Lazarus Group, with direct losses totaling $3.86 million. The attack stemmed from a vulnerability in the interaction between Omni’s deposit/withdrawal infrastructure and smart contracts. After funds were drained from a BSC hot wallet, they were transferred to KuCoin and swapped across chains into BTC. The project team completed the contract vulnerability fix and paused the service within 4 hours, pledging full reimbursement for affected assets. Some public-chain deposit/withdrawal services will be paused for about 12 hours to complete infrastructure remediation. This incident is directly related to cross-chain interactions and infrastructure security within the NEAR ecosystem, and because the funds were ultimately exchanged into BTC, it creates a short-term linkage to BTC-chain fund flows. The key follow-up checkpoints are the reimbursement execution progress and the full restoration of deposit/withdrawal services after the 12-hour pause.
$NEAR $BTC