[NEAR Intents Discloses $3.8 Million Vulnerability Incident: Exploiter Generated Fake Balances Using Deposit Notification Flaw, Funds Fully Returned] Odaily Planet Daily News – Cross-chain swap protocol NEAR Intents has released a post-incident report detailing a vulnerability that led to the extraction of $3.8 million worth of assets. The incident stemmed from a flaw in the deposit notification function. Exploiters created a smart contract designed to intentionally cause notification failures, resulting in deposited tokens being refunded while the protocol's internal ledger still recorded the corresponding balance. The report revealed that the exploiter generated $3.8 million in unsupported fake balances through 23 failed deposit transactions and withdrew real tokens between September 29 and October 1, transferring them to other blockchains via the Omni infrastructure. NEAR Intents General Manager Alex Shevchenko emphasized that the vulnerability was within the NEAR Intents contract, not the Omni infrastructure. NEAR Intents stated that the exploiter returned all funds within 36 hours of the vulnerability being discovered, and all affected users have been fully compensated. The team has improved balance monitoring mechanisms and completely removed the flawed functionality as of October 7. Additionally, another security researcher who discovered a related critical vulnerability was awarded $300,000.