A security flaw in NEAR Intents' Omni system allowed an attacker to siphon roughly $3.8 million in assets on Thursday, prompting the platform to suspend cross-chain operations and restrict deposits and withdrawals across multiple networks.

The breach originated from an interaction between the Omni deposit and withdrawal module and a smart contract governing asset routing, according to the company's post-incident analysis. Engineers patched the vulnerability within hours and announced a full reimbursement of stolen funds. Law enforcement agencies were notified, and forensic firms were engaged to track the diverted assets.

Blockchain analyst ZachXBT traced the illicit transfers to a BNB Chain wallet linked to NEAR Intents, noting that the funds were routed through KuCoin and subsequently converted into bitcoin. The incident marks the latest in a series of high‑profile crypto exploits this year, following breaches at Bitget, Liquid Network, Drift and Kelp that collectively resulted in losses exceeding $1 billion.

NEAR Intents, which enables users to specify desired swaps without manually selecting bridges or exchanges, processed over $30 billion in volume across 35 blockchains before the disruption. Its native token, NEAR, slipped about 6 % in the 24‑hour period following the incident, though the price movement reflected market reaction to the breach rather than any flaw in the underlying NEAR Protocol.

While core services are expected to resume shortly, several connected chains — including BNB Smart Chain, Polygon, TON, Optimism, Avalanche, Stellar, Monad, X Layer, ADI, Scroll and Plasma — will remain offline for additional remediation work. The company has not disclosed a timeline for full restoration of deposit and withdrawal functionality.

The episode underscores growing risks in decentralized finance infrastructure, where even audited smart contracts can harbor exploitable bugs that enable rapid, large‑scale fund extraction.