Wu Blockchain has learned that NEAR Intents released a post-mortem report on a security incident that occurred on October 1, revealing a vulnerability in its smart contract during token deposit processes when calling third-party contracts. Attackers exploited the refund mechanism triggered by failed calls, causing funds to be returned while deposits were still recorded. This resulted in approximately $3.8 million in fake balances across 23 failed deposit transactions, which were later extracted via Omni cross-chain infrastructure. The team confirmed that the vulnerability was in the NEAR Intents contract, not the Omni infrastructure. Through on-chain tracking and negotiations with the attacker, the entire $3.8 million was recovered within 36 hours of identifying the issue. The team has removed the related deposit notification feature, added abnormal balance monitoring and an automatic suspension mechanism, and paid a $300,000 bounty to the researcher who reported another critical vulnerability in the same feature on October 7. https://(wublock123.com)/news/near-intents-discloses-3-8m-exploit-contract-flaw-fake-deposits-recovered-70225