Crash

Value

NEAR Protocol

Omni

when

Picture this. It's an ordinary trading day, NEAR is holding its range, and then within hours a chart that looked flat turns into a cliff. That's what happened when NEAR Intents, the cross-chain engine built on NEAR, got hit by an exploit that drained more than $3.8 million before anyone outside the team even knew something was wrong.&nbsp;
By the time NEAR Protocol price stopped falling, traders had watched the token lose 8.3% in a single stretch. Here's exactly what happened, where the stolen money went, and what NEAR is doing to make people whole.
Key Takeaways
<ul>
 <li><a href="https://intents.near.org/" rel="noopener noreferrer nofollow">NEAR Intents</a> lost over $3.8 million to an exploit tied to a bug in its Omni deposit and withdrawal system, narrowed down to USDT on BSC, and the team has promised full reimbursement to every affected user.</li>
 <li><a href="https://www.coingabbar.com/en/near-protocol-price-prediction-october-2026-forecast" rel="noopener noreferrer nofollow">NEAR Protocol price</a> fell 8.3%, sliding from $5.51 down to $4.75 before steadying near $4.99, even as the core NEAR blockchain kept producing blocks with zero downtime.</li>
 <li>NEAR ETF products still pulled in $8.08 million in daily net inflows on October 1, per SoSoValue data, a sign that not everyone hit the exit button.</li>
</ul>
<h2 id="span-span-style-font-size-16px-the-moment-everything-went-sideways-what-triggered-the-exploit-span-span">The Moment Everything Went Sideways: What Triggered the Exploit?</h2>
<a href="https://x.com/WuBlockchain/status/2105671861241827634" rel="noopener noreferrer nofollow">Onchain investigator ZachXBT</a> was the first to sound the alarm, spotting unusual outflows from a NEAR Intents BSC hot wallet that kept climbing past $3.8 million. The money didn't sit still. It moved straight to KuCoin and was then bridged into Bitcoin, a classic laundering shortcut that attackers lean on when they want distance between the hack and the cash-out.
<img alt="Near Intents Exploit" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/OXhcVjqTviH29HdI99awenCK1fRXL8N3gwz1qGKy.png" width="300" title="Near Intents Exploit">
Source: <a href="https://x.com/near_intents/status/2105642219357241796" rel="noopener noreferrer nofollow">X Post</a>
NEAR Intents confirmed the breach shortly after, pinning it on a bug in how its Omni deposit and withdrawal infrastructure talks to its smart contracts. <a href="https://x.com/ilblackdragon/status/2105686871200366663" rel="noopener noreferrer nofollow">Co-founder Illia (root.near)</a> later gave the clearest picture: the flaw was isolated to USDT on BSC, and SHIELD, the project's AI-driven outlier-detection layer, caught the strange activity and paused Intents before things got worse.&nbsp;
detection to fix, the whole thing took about an hour.
<h3 id="span-span-style-font-size-16px-how-hard-did-near-protocol-price-actually-fall-span-span">How Hard Did NEAR Protocol Price Actually Fall?</h3>
Numbers tell the story faster than words here. <a href="https://www.coingabbar.com/en/near-protocol-hits-yearly-high-ahead-near-etf-launch" rel="noopener noreferrer nofollow">NEAR Protocol</a> price is a classic case of sentiment moving quicker than facts, traders sold first and asked questions later.
<img alt="Near token price chart" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/sXTK3tOyGyQZVXu6hTxVjTrvXOX3sCBZxI8wlyK3.png" width="300" title="Near token price chart">
Source: <a href="https://www.coingecko.com/en/coins/near" rel="noopener noreferrer nofollow">Coingecko Data</a>
<div>
 <table>
 <colgroup>
 <col width="230">
 <col width="70">
 </colgroup>
 <tbody>
 <tr>
 <td>Metric</td>
 <td>Value</td>
 </tr>
 <tr>
 <td>Price (at writing)</td>
 <td>$4.99</td>
 </tr>
 <tr>
 <td>24-Hour Change</td>
 <td>-8.3%</td>
 </tr>
 <tr>
 <td>Day's High</td>
 <td>$5.51</td>
 </tr>
 <tr>
 <td>Day's Low</td>
 <td>$4.75</td>
 </tr>
 <tr>
 <td>Market Cap</td>
 <td>$6.542B</td>
 </tr>
 <tr>
 <td>24-Hour Trading Volume</td>
 <td>$1.472B</td>
 </tr>
 </tbody>
 </table>
</div>
<h2 id="span-span-style-font-size-16px-what-about-user-funds-stuck-in-near-intents-span-span">What About User Funds Stuck in NEAR Intents?</h2>
This is the part most people actually care about. NEAR Intents said every dollar lost will be reimbursed in full. Core services were expected back online within an hour of the announcement. But not every chain reopened at once. Deposits and withdrawals stayed frozen for roughly 12 hours on BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll, and Plasma while engineers finished patching the Omni infrastructure behind the scenes.
If your assets from those chains were sitting inside Intents, say in a HOT wallet or parked on near.com, the team said you'd be able to swap them into other assets once service resumed. Beyond the fix, Intents reported the incident to law enforcement and brought in blockchain analytics partners to trace the stolen funds and push for recovery.
<h2 id="span-span-style-font-size-16px-did-near-protocol-itself-get-hacked-too-span-span">Did NEAR Protocol Itself Get Hacked Too?</h2>
Short answer, no. <a href="https://x.com/NEARProtocol/status/2105697524916916349" rel="noopener noreferrer nofollow">Its official account</a> was quick to draw a hard line: the blockchain never stopped, the native token was never touched, and blocks kept getting produced without a single gap.&nbsp;
<img alt="Nera protocol response " src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/4J4Mi3vS9a2RSjcq5MtCfRD2E46TDru4qfWTgTu8.png" width="300" title="Nera protocol response ">
This was an Intents problem, not a protocol problem, and that distinction matters a lot when you're trying to figure out whether the price reflects a deeper issue or just a scare.
<h2 id="span-span-style-font-size-16px-why-did-the-co-founder-call-this-a-wake-up-call-span-span">Why Did the Co-Founder Call This a Wake-Up Call?</h2>
Illia didn't downplay it. He pointed out that NEAR Intents now processes over $4 billion a month in trading and payments volume, which means a bug this size was always going to sting. He called it the first major exploit on Intents and connected it to a wider pattern, recent attacks on BitGet, <a href="https://www.coingabbar.com/en/metamask-security-incident-wallets-staking-validator-update" rel="noopener noreferrer nofollow">Metamask wallet</a>, and Lido, as proof that crypto is facing smarter, AI-equipped attackers than before.&nbsp;
His response wasn't just damage control. It is rolling out a formal verification system for its contracts, a method that mathematically checks code for entire classes of bugs before they ship, and plans to pair it with wider SHIELD monitoring. A full postmortem is coming in the following days.
<h2 id="span-span-style-font-size-16px-what-s-next-span-span">What's Next?</h2>
The patch is live, most chains are back, and the compensation promise is public. What happens next comes down to execution. Will the postmortem hold up to scrutiny? Will the remaining chains reopen on schedule?&nbsp;
NEAR Protocol price will likely stay reactive to how those answers unfold, while the $8.08 million in <a href="https://sosovalue.com/assets/etf/us-near-spot" rel="noopener noreferrer nofollow">ETF inflows</a> on October 1, part of a $44.07 million cumulative net inflow and $55.57 million in total net assets according to SoSoValue, suggests a chunk of the market is choosing to wait this one out rather than run.
YMYL Disclaimer:This content is for informational purposes only and does not count as financial, investment, or trading advice. Cryptocurrency markets are highly volatile, and price can change sharply within hours. Always do your own research and consult a licensed financial advisor before making any investment decision.

NEAR Protocol Price Crash 8.3% After Exploit, What About User Funds?

Table of Contents

Coingabbar

Other articles published on Oct 2, 2026

Join our free newsletter for daily crypto updates!