Oct 1: NEAR Intents paused — bug in Omni deposit/withdrawal infra interaction with Intents smart contract — $3.8M (~₿43.8) stolen from hot wallet — ZachXBT: irregular outflows BNB Chain → KuCoin → bridged to Bitcoin — tested with $10 then drained $3.87M, 76% moved to BTC* $MAGIC $SAND $MAGMA
- *GM Alex Shevchenko post 00:18 UTC Oct 2 @AlexAuroraDev: "We have identified you, sir" — "You know better than most how responsible disclosure works — this is the last window to use it. After 48 hours, that window closes" — gave return addresses: BTC bc1qjhv3hu8rfteh5e8exfmalvx2z3pzlmjlgnzxey, BNB/ETH 0xB18a1aEDfde8B70FD67012C9E9c7a088B4d0C0e7, SOL AHTfKaeRcaK1sbSG8MFJS2uPxLBChfenigNtvbWEkhKD — deadline ∼00:18 UTC Oct 4 — no name, no bounty listed (programs max $300K each) — reported to law enforcement + analytics firms tracing (Bitquery 99% funds traceable) — 11 networks still suspended at noon AEST Fri: BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, X Layer, ADI, Scroll, Plasma — app back online ∼12h later, full compensation pledged*
- *Context: Days after NEAR Intents blocked Bitget Sep 24 hack proceeds — $50M+ tried to move via platform, $166K got through, SHIELD froze $503K — protocol does $4B+/month volume — Bitwise spot NEAR ETF listed NYSE Sep 29 names Intents flagship*
*BREAKING 🚨 NEAR Intents Oct 1 $3.8M Omni exploit — GM Alex Shevchenko Oct 2: "We have identified you, sir" 48h responsible disclosure clock 🚨 Return BTC/ETH-BNB/SOL addresses given, window closes Oct 4 00:18 UTC — funds KuCoin → BTC per ZachXBT, 99% traceable — 11 networks paused, app back in 12h, full refund pledged — days after blocking $50M Bitget hack try ⚡*
- *GM Alex Shevchenko post 00:18 UTC Oct 2 @AlexAuroraDev: "We have identified you, sir" — "You know better than most how responsible disclosure works — this is the last window to use it. After 48 hours, that window closes" — gave return addresses: BTC bc1qjhv3hu8rfteh5e8exfmalvx2z3pzlmjlgnzxey, BNB/ETH 0xB18a1aEDfde8B70FD67012C9E9c7a088B4d0C0e7, SOL AHTfKaeRcaK1sbSG8MFJS2uPxLBChfenigNtvbWEkhKD — deadline ∼00:18 UTC Oct 4 — no name, no bounty listed (programs max $300K each) — reported to law enforcement + analytics firms tracing (Bitquery 99% funds traceable) — 11 networks still suspended at noon AEST Fri: BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, X Layer, ADI, Scroll, Plasma — app back online ∼12h later, full compensation pledged*
- *Context: Days after NEAR Intents blocked Bitget Sep 24 hack proceeds — $50M+ tried to move via platform, $166K got through, SHIELD froze $503K — protocol does $4B+/month volume — Bitwise spot NEAR ETF listed NYSE Sep 29 names Intents flagship*
*BREAKING 🚨 NEAR Intents Oct 1 $3.8M Omni exploit — GM Alex Shevchenko Oct 2: "We have identified you, sir" 48h responsible disclosure clock 🚨 Return BTC/ETH-BNB/SOL addresses given, window closes Oct 4 00:18 UTC — funds KuCoin → BTC per ZachXBT, 99% traceable — 11 networks paused, app back in 12h, full refund pledged — days after blocking $50M Bitget hack try ⚡*
