SHIELD

Gracy

THORChain

USDC

Bitcoin

<p>NEAR Intents says it has disrupted an attempted laundering flow connected to <a rel="noopener noreferrer nofollow" href="https://partner.bitget.com/bg/cryptobreaking">Bitget</a>’s recent hack, blocking more than $50 million in transactions tied to the attacker’s cross-chain activity. The protocol also reports having frozen $503,000 during execution, with an additional $166,000 passing through amid the broader effort to identify and contain stolen funds.</p>
<p>The announcement comes as <a rel="noopener noreferrer nofollow" href="https://partner.bitget.com/bg/cryptobreaking">Bitget</a>’s $387.5 million theft prompted renewed pressure on decentralized exchanges and cross-chain swap protocols to refuse service to exploit-related addresses. NEAR Intents’ stance highlights a recurring dilemma for permissionless infrastructure: how to preserve open interoperability while limiting the ability for criminals to monetize stolen assets.</p>
<h2 id="key-takeaways">Key takeaways</h2>
<ul>
 <li>NEAR Intents says SHIELD detected and blocked over <strong>$50 million</strong> in attempted transfers linked to the Bitget hack.</li>
 <li>The protocol reports <strong>$503,000</strong> frozen during execution and <strong>$166,000</strong> suspected stolen funds passing through.</li>
 <li>NEAR Intents says it will <strong>not take Bitget’s bounty</strong> for freezing or recovering attacker-linked funds, citing a legal return process.</li>
 <li><a rel="noopener noreferrer nofollow" href="https://med.etoro.com/B10215_A127826_TClick_Scb-circle.aspx?TargetURL=https://www.etoro.com/markets/crcl">Circle</a> and Tether reportedly blacklisted a wallet linked to the exploiter, freezing USDt and USDC amounts per on-chain data.</li>
 <li>Debate continues over whether decentralized swap systems like THORChain should selectively block exploit-related addresses.</li>
</ul>
<h2 id="near-intents-describes-shield-blocking-activity">NEAR Intents describes SHIELD blocking activity</h2>
<p>According to NEAR Intents’ general manager Alex Shevchenko, a large portion of the funds stolen from Bitget earlier this week moved across blockchains, including transfers flowing toward <a rel="noopener noreferrer nofollow" href="https://coinstats.app/coins/ethereum/">Ethereum</a>. Shevchenko framed the response around SHIELD, NEAR Intents’ detection and enforcement mechanism for cross-chain asset routing.</p>
<p>In a statement relayed by Shevchenko, the SHIELD system identified and prevented more than $50 million in attempted transfers associated with the attack. Shevchenko added that SHIELD also managed to freeze $503,000 during execution, while about $166,000 in funds suspected to be stolen was still able to pass through—suggesting that not every related movement can be halted in real time.</p>
<p>The protocol’s activity also illustrates how laundering attempts often rely on speed and routing across multiple networks, placing cross-chain systems at the center of modern incident response.</p>
<h2 id="why-permissionless-systems-aren-t-neutral-in-practice">Why permissionless systems aren’t “neutral” in practice</h2>
<p>Shevchenko argued that permissionless protocols do not have to be neutral in how they handle illicit behavior. “The people who build these systems make choices about what those protocols enable,” he said, adding that refusing to assist in laundering stolen assets is part of NEAR Intents’ design intent.</p>
<p>He connected that position to broader market structure, emphasizing that property rights are foundational to functional financial systems. In his view, an environment where theft automatically converts into unrestricted monetization undermines the credibility of digital asset markets and cannot be an “economic backbone” for the future.</p>
<p>NEAR Intents’ argument is likely to resonate with other players that have started to treat sanctions-like responses—blacklisting, freezing, and routing limitations—as an increasingly necessary layer for risk management, even in ecosystems that market themselves on openness.</p>
<h2 id="bitget-bounty-near-intents-says-it-will-forego-rewards">Bitget bounty: NEAR Intents says it will forego rewards</h2>
<p>NEAR Intents said it will not claim the bounty offered by Bitget. The protocol referenced a 5% reward for freezing attacker funds and an additional 5% for recovering them, saying it will instead allow more funds to be returned to Bitget.</p>
<p>Shevchenko stated that the frozen funds would be returned through what he described as an appropriate legal process. That detail matters for investors and users because it signals a more conventional pathway for asset handling—aligning technical containment with legal recovery rather than internal retention or discretionary allocation.</p>
<p>While the specific mechanics of that legal process were not detailed, the choice not to take the bounty could reduce incentives for rushed actions and reinforce coordination with affected counterparties.</p>
<h2 id="broader-response-stablecoin-issuers-and-thorchain-debate">Broader response: stablecoin issuers and THORChain debate</h2>
<p>NEAR Intents’ disclosure arrives during a wider chain-reaction response to the Bitget hack. Earlier coverage and related on-chain observations indicated that <a rel="noopener noreferrer nofollow" href="https://med.etoro.com/B10215_A127826_TClick_Scb-circle.aspx?TargetURL=https://www.etoro.com/markets/crcl">Circle</a> and Tether blacklisted a wallet linked to the Bitget exploiter, freezing $318,013 of USDt (USDT) and USDC based on on-chain data.</p>
<p>At the same time, Bitget CEO Gracy Chen publicly called on THORChain to refuse services to addresses connected to the attack. THORChain’s response emphasized that it “doesn’t censor by design,” and it noted that while it has halted its network in past scenarios, such actions are broad emergency security measures rather than selective freezes of specific funds or individual swaps.</p>
<p>This contrast underscores a key tension for decentralized cross-chain infrastructure: selective address blocking can look like censorship to some users, yet doing nothing may allow exploit-derived capital to move efficiently through permissionless liquidity. NEAR Intents’ SHIELD-based approach suggests an alternative framing—treating constraints not as censorship of users, but as built-in protections against helping criminals monetize stolen property.</p>
<p>In Shevchenko’s view, crypto cannot simultaneously demand recognition of digital property rights while building infrastructure optimized for turning stolen assets into spendable value.</p>
<h2 id="what-to-watch-next">What to watch next</h2>
<p>Investors and builders may want to track whether SHIELD-style controls become more common across cross-chain systems, and—just as importantly—how regulators and courts view the intersection of permissionless routing with selective containment. The immediate question is how much additional stolen value can be identified, frozen, and returned as attackers keep moving funds across networks.</p>
<p>This article was originally published as <a href="https://www.cryptobreaking.com/near-intents-blocks-50m-from/?utm_source=rss&amp;utm_medium=syndication&amp;utm_campaign=article_footer" rel="noopener noreferrer nofollow">NEAR Intents Blocks $50M from Alleged Bitget Hackers</a> on <a href="https://www.cryptobreaking.com/?utm_source=rss&amp;utm_medium=syndication&amp;utm_campaign=article_footer" rel="noopener noreferrer nofollow">Crypto Breaking News</a> – your trusted source for crypto news, Bitcoin news, and blockchain updates.</p>

NEAR Intents Blocks $50M from Alleged Bitget Hackers

Table of Contents

Crypto Breaking News

Other articles published on Sep 29, 2026

Join our free newsletter for daily crypto updates!