NEAR Intents temporarily halted services after detecting a security incident affecting its cross-chain deposit and withdrawal system. The protocol said the preliminary loss was approximately $3.8 million and that affected funds would be reimbursed in full.

The incident was attributed to a bug in the interaction between the Omni deposit and withdrawal infrastructure and a NEAR Intents smart contract. NEAR Intents said the vulnerable contract component had been patched. The protocol’s initial disclosure did not identify the attacker.

In a post on X dated October 1, 2026, NEAR Intents said:

Earlier today NEAR Intents services were stopped after a security incident was detected. The incident was caused by a bug in the Omni deposit and withdrawal infrastructure interaction with NEAR Intents smart contract. The preliminary report indicates the total loss of… — NEAR Intents (@near_intents) October 1, 2026

https://x.com/near_intents/status/2105642219357241796?ref_src=twsrc%5Etfw

The case was reported to police, while security firms and blockchain-analysis companies assisted with tracking the stolen assets and evaluating recovery options.

NEAR Intents and near.com were expected to resume normal operations about an hour after the announcement, although some cross-chain operations were expected to require additional time. The protocol said several networks would continue to have deposits and withdrawals blocked for approximately another 12 hours while the infrastructure was patched.

The affected networks were BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll and Plasma. Users holding assets from those networks on NEAR Intents were expected to be able to swap them for other assets after core services resumed. The restrictions applied to deposits and withdrawals rather than representing a complete halt to asset swaps.

The breadth of that list underscores the sensitivity of shared cross-chain infrastructure: because the affected component handled deposits and withdrawals at a common entry point, a single bug in one contract interaction placed restrictions on users across eleven networks at the same time.

NEAR Intents said the losses would be covered in full, limiting the immediate financial impact on users to approximately $3.8 million. That commitment places the immediate burden of the loss on the protocol rather than on depositors. The protocol had not yet released a complete technical report describing how the exploit occurred or how the funds moved after being extracted.

A detailed incident report was expected in the following days. It was expected to address the exploitation path, the vulnerable components of the Omni ecosystem, the incident’s timeline and the measures being taken to remediate the remaining issues.

The exploit followed NEAR Intents’ recent involvement in blocking funds linked to the Bitget hack. NEAR Intents previously said it had blocked more than $50 million in suspicious funds connected to that case and frozen more than $500,000.

The new incident occurred days after the protocol had helped trace and limit the movement of stolen cryptocurrency, raising questions about its cross-chain infrastructure. NEAR Intents said it had fixed the critical contract component and would address other infrastructure issues before fully reopening all supported deposit and withdrawal routes. The immediate developments to watch are the detailed incident report, the restoration of deposits and withdrawals the affected networks once the roughly 12-hour patching window ends, and any updates from the police and the blockchain-analysis companies tracking the stolen assets.