Two hack victims, two very different outcomes. This week showed both ends of the recovery spectrum in crypto.

📌 The news

NEAR Intents got back all $3.8 million drained from a BNB Chain treasury contract after giving the suspected exploiter a 48-hour deadline, per Cointelegraph. Around the same time, The Block reported that Solana-based Drift opened recovery claims for its April exploit, with initial payouts of just over 1% of verified losses.

🔍 How they differ

‱ Speed: NEAR Intents identified the attacker within days. Drift's case dates back to April.

‱ Size: $3.8 million is easier to return than a loss reported in the hundreds of millions.

‱ Method: NEAR used direct pressure. Drift uses DFX recovery tokens that redeem for about 0.0104 USDT each today, with the pool expected to grow from revenue, Tether support of up to 127.5 million USDT, and partner capital.

📊 The numbers

‱ NEAR Intents: about $3.87 million in USDT taken over two days, all returned.

‱ Drift: about 3.11 million USDT available at launch, claim window open until January 1, 2028.

‱ $NEAR trades near $5.08 after a 5.8% daily gain, and $SOL near $121.39, per CoinGecko.

⚖ Bull vs bear case

The hopeful view is that the industry now has real recovery playbooks, from negotiation to long-term reimbursement tokens. The sober view is that full recoveries remain the exception, and most users who lose funds in exploits get back only a fraction.

👀 What to watch next

‱ Whether Drift's redemption rate rises over the coming months.

‱ More teams using identity-based ultimatums, and how attackers respond.

━━━━━━━━━━━━

💡 My take: In my view, the best recovery plan is still prevention. Bug bounties, audits and limits on how much a single contract can release are cheaper than any recovery process.

💬 Which matters more to you when choosing a protocol, security history or recovery plans?