FILTERED RESULTS
FILTERS
Ads Top
DARK MODE
CHART
MCap $2.8T -0.9%24h Vol $148.6T -100%Fear & Greed 63/100Alts Index 59/100
BTC.D 59.4% 0%Stable.D 9.6% +0.1%ETH.D 10.8% +0.1%Others.D 20.2% -0.2%
AI$0.1106+26.21%•DRV$0.4252+13.71%•RAIN$0.00915962+12.92%•TIA$0.6756+12.79%•CRCLX$84.967+11.22%•CARDS$0.3302+11.09%•FIL$1.150+7.69%•INJ$8.657+6.38%•APE$0.1507+5.97%•ETHFI$0.6825+5.74%•
STRK$0.0728-18.35%•HUMA$0.0275-14.16%•WAL$0.0448-13.76%•BTW$1.735-12.44%•PYTH$0.0841-11.07%•AKE$0.0293-10.87%•CASHCAT$0.1085-8.67%•VVV$22.950-8.33%•PONS$0.3214-7.15%•CAP$0.0736-6.72%•
Top movers 24h
    Filters
      Coins
      Sentiment
      Impact
      Search
      FILTERED RESULTS

        

      Upgrade your plan
      Dashboard

      NEAR Intents Reports $3.8 Million Vulnerability Due to Deposit Notification Flaw

      NEAR Intents, a cross-chain exchange protocol, has released a post-mortem report detailing a vulnerability that led to a loss of $3.8 million. The report, published by General Manager Alex Shevchenko on October 16, attributes the issue to a flaw in the deposit notification feature of the protocol. This feature is designed to notify third-party contracts when tokens are deposited, but the attacker exploited a failure in this notification system to withdraw the funds before the protocol was shut down on October 1.

      The attacker executed 23 failed deposit transactions, which allowed them to accumulate what the report describes as 'ghost funds.' By creating a contract that caused the notification to fail, the attacker was able to refund the deposit while NEAR Intents retained the corresponding ledger credit. This manipulation enabled the withdrawal of real tokens, which were then transferred to other chains using the Omni infrastructure. Shevchenko clarified that the vulnerability was specific to the NEAR Intents contract and not related to the Omni infrastructure.

      Following the incident, the NEAR Intents team acted swiftly, pausing the settlement contract on October 1 and reopening it shortly thereafter. All affected users were fully compensated, and the team implemented additional monitoring checks to prevent similar vulnerabilities in the future. A fix for the vulnerability was deployed on October 2, but a subsequent serious vulnerability report regarding the same feature led to its complete removal on October 7, with a researcher receiving a $300,000 reward for their findings.

      © 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

      Source: KLEA News

      .

      Terra Founder Do Kwon Sentenced to 15 Years in Prison for Fraud