{
  "version": 1,
  "event_id": "evt_1cf36734246e006d",
  "url": "https://xiyu.news/events/evt_1cf36734246e006d/",
  "json": "https://xiyu.news/api/events/evt_1cf36734246e006d.json",
  "type": "security_incident",
  "status": "resolved",
  "category": "crypto",
  "title": {
    "zh": "NEAR Intents 遭攻击损失超380万美元后暂停服务并追回资金",
    "en": "NEAR Intents exploited for over $3.8M, halts services, and recovers funds"
  },
  "current_state": {
    "zh": "NEAR Intents 被盗资金已全额追回；团队称在攻击发生后不到 24 小时内锁定责任方、建立沟通，并归功于 AI 安全层 SHIELD。NEAR 表示将继续强化安全系统，事件由此进入资金追回完成后的收尾阶段。",
    "en": "The stolen NEAR Intents funds have been fully recovered; the team says it identified and contacted the responsible party within 24 hours of the attack and credited the AI security layer SHIELD. NEAR says it will continue strengthening its security systems, and the incident has moved into post-recovery wrap-up."
  },
  "first_seen_at": "2026-10-01T15:11:04.403203+00:00",
  "last_updated_at": "2026-10-03T02:17:05.649754+00:00",
  "last_material_change_at": "2026-10-03T02:17:05.649754+00:00",
  "confidence": 0.75,
  "updates_count": 7,
  "sources_count": 17,
  "entities": [
    "after",
    "alert",
    "bitget",
    "bsc",
    "community",
    "days",
    "denying",
    "group",
    "hack",
    "hacked",
    "hacker",
    "hacks",
    "halts",
    "intents",
    "korea",
    "lazarus",
    "lazarus-group",
    "linked",
    "loss",
    "million",
    "near",
    "near-intents",
    "north",
    "reports",
    "services",
    "shield"
  ],
  "identifiers": [],
  "topics": [
    "ai-security",
    "bsc",
    "cross-chain",
    "crypto-protocols",
    "fund-laundering",
    "fund-recovery",
    "hack",
    "hack-recovery",
    "hacks",
    "hot-wallet-compromise",
    "intents",
    "lazarus-group",
    "money-laundering",
    "near",
    "near-intents",
    "on-chain-message",
    "price-reaction",
    "responsible-disclosure",
    "security-exploit",
    "security-incident",
    "smart-contract-vulnerability"
  ],
  "updates": [
    {
      "update_id": "upd_9c7ebdd858e6b622",
      "event_id": "evt_1cf36734246e006d",
      "occurred_at": "2026-10-01T13:02:44Z",
      "published_at": "2026-10-01T13:02:44Z",
      "first_seen_at": "2026-10-01T15:11:04.403203Z",
      "time_precision": "published",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "社区警报：Near Intents 在其 BSC 热钱包后遭利用，损失超 380 万美元",
      "title_en": "Community Alert: Near Intents was exploited for $3.8M+ after its BSC hot wallet",
      "what_changed_zh": "Near Intents 在 BSC 上遭遇热钱包漏洞利用，异常流出超过 380 万美元，促使其在涉及多 EVM 链的事件中暂停交易，被盗资金被转至 KuCoin 并跨链至比特币。",
      "what_changed_en": "Near Intents suffered a hot-wallet exploit on BSC with over $3.8M in irregular outflows, prompting it to halt transactions amid a multi-EVM-chain incident, with the stolen funds routed to KuCoin and bridged to Bitcoin.",
      "current_state_zh": "Near Intents 在 BSC 上遭遇热钱包漏洞利用，异常流出超过 380 万美元，促使其在涉及多 EVM 链的事件中暂停交易，被盗资金被转至 KuCoin 并跨链至比特币。",
      "current_state_en": "Near Intents suffered a hot-wallet exploit on BSC with over $3.8M in irregular outflows, prompting it to halt transactions amid a multi-EVM-chain incident, with the stolen funds routed to KuCoin and bridged to Bitcoin.",
      "detailed_summary_zh": "Near Intents suffered a hot-wallet exploit on BSC with over $3.8M in irregular outflows, prompting it to halt transactions amid a multi-EVM-chain incident, with the stolen funds routed to KuCoin and bridged to Bitcoin.",
      "detailed_summary_en": "Near Intents suffered a hot-wallet exploit on BSC with over $3.8M in irregular outflows, prompting it to halt transactions amid a multi-EVM-chain incident, with the stolen funds routed to KuCoin and bridged to Bitcoin.",
      "background_zh": "",
      "background_en": "",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "",
      "market_impact_en": "",
      "importance_score": 7.0,
      "references": [],
      "confidence": 0.75,
      "story_ids": [
        "telegram:investigations:365",
        "telegram:theblockbeats:198623",
        "rss:thedefiant.io_api_feed:62cb110372cf4ca6",
        "rss:decrypt.co_feed:6c8fa4c422a450ea",
        "rss:cointelegraph.com_rss:810e3ba0274a9e80",
        "rss:protos.com_feed_:e26db671870ccbba"
      ],
      "sources": [
        {
          "url": "https://partners.near-intents.org/shield/status",
          "label": "investigations",
          "source_type": "telegram",
          "official": false
        },
        {
          "url": "https://m.theblockbeats.info/flash/369943?from=telegram",
          "label": "theblockbeats",
          "source_type": "telegram",
          "official": false
        },
        {
          "url": "https://thedefiant.io/news/hacks/near-intents-halts-services-reports-3-8-million-loss",
          "label": "The Defiant",
          "source_type": "rss",
          "official": false
        },
        {
          "url": "https://decrypt.co/379822/near-intents-hacked-days-after-denying-bitget-hacker",
          "label": "Decrypt",
          "source_type": "rss",
          "official": false
        },
        {
          "url": "https://cointelegraph.com/news/near-intents-exploit-assistance-bitget-hack?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound",
          "label": "Cointelegraph",
          "source_type": "rss",
          "official": false
        },
        {
          "url": "https://protos.com/near-intents-hacked-days-after-freezing-stolen-bitget-funds/",
          "label": "Protos",
          "source_type": "rss",
          "official": false
        }
      ]
    },
    {
      "update_id": "upd_82540b51cf8c4597",
      "event_id": "evt_1cf36734246e006d",
      "occurred_at": "2026-10-01T13:08:02Z",
      "published_at": "2026-10-01T13:08:02Z",
      "first_seen_at": "2026-10-01T15:11:06.096365Z",
      "time_precision": "published",
      "update_type": "confirmation",
      "material_change": true,
      "title_zh": "NEAR Intents确认遭攻击，涉案金额超380万美元",
      "title_en": "NEAR Intents确认遭攻击，涉案金额超380万美元",
      "what_changed_zh": "NEAR Intents 正式确认攻击，指漏洞源于 Omni 充提基础设施与合约交互缺陷；已完成合约修复，预计 1 小时内恢复核心服务，承诺全额赔付受损资产，BSC、Polygon、TON 充提额外暂停约 12 小时，并已报案并展开链上追踪。",
      "what_changed_en": "NEAR Intents formally confirmed the exploit, attributing it to flaws in its Omni deposit/withdrawal infrastructure and contract interactions; it has patched the contract, expects core services back within ~1 hour, pledged full reimbursement of affected assets, paused BSC/Polygon/TON deposits and withdrawals for an additional ~12 hours, and filed a report while pursuing on-chain tracing.",
      "current_state_zh": "Near Intents 已确认其 Omni 充提基础设施与合约交互缺陷导致的攻击，损失超 380 万美元；合约漏洞已修复，核心服务预计 1 小时内恢复，BSC、Polygon、TON 充提额外暂停约 12 小时，承诺全额赔付，并已报案，被盗资金仍流向 KuCoin 并跨链至比特币。",
      "current_state_en": "Near Intents has confirmed an exploit exceeding $3.8M caused by flaws in its Omni deposit/withdrawal infrastructure and contract interactions; the contract flaw is patched, core services are expected to resume within ~1 hour, BSC/Polygon/TON deposits and withdrawals remain paused for an additional ~12 hours, full reimbursement is pledged, a report has been filed, and stolen funds were routed to KuCoin and bridged to Bitcoin.",
      "detailed_summary_zh": "NEAR Intents confirmed an exploit exceeding $3.8M caused by flaws in its Omni deposit/withdrawal infrastructure and contract interactions, has patched the contract and pledged full reimbursement while pausing BSC, Polygon and TON deposits/withdrawals for roughly 12 hours, as on-chain sleuth ZachXBT tracked stolen funds moving to KuCoin and across a bridge to Bitcoin.",
      "detailed_summary_en": "NEAR Intents confirmed an exploit exceeding $3.8M caused by flaws in its Omni deposit/withdrawal infrastructure and contract interactions, has patched the contract and pledged full reimbursement while pausing BSC, Polygon and TON deposits/withdrawals for roughly 12 hours, as on-chain sleuth ZachXBT tracked stolen funds moving to KuCoin and across a bridge to Bitcoin.",
      "background_zh": "",
      "background_en": "",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "",
      "market_impact_en": "",
      "importance_score": 7.5,
      "references": [],
      "confidence": 0.9,
      "story_ids": [
        "telegram:theblockbeats:198622",
        "telegram:foresightnews:119576",
        "telegram:wublockchainenglish:26247",
        "rss:www.theblock.co_rss.xml:d83b88f3a7aa24d6"
      ],
      "sources": [
        {
          "url": "https://m.theblockbeats.info/flash/369942?from=telegram",
          "label": "theblockbeats",
          "source_type": "telegram",
          "official": false
        },
        {
          "url": "http://near.com/",
          "label": "foresightnews",
          "source_type": "telegram",
          "official": false
        },
        {
          "url": "https://wublockchain.xyz/news/news-21075",
          "label": "wublockchainenglish",
          "source_type": "telegram",
          "official": false
        },
        {
          "url": "https://www.theblock.co/news/ecosystems/2026-10-01-near-intents-halts-services-after-3-8-million-exploit-promises-full-compensation-417404",
          "label": "The Block",
          "source_type": "rss",
          "official": false
        }
      ]
    },
    {
      "update_id": "upd_1f55cddfaa5b71bb",
      "event_id": "evt_1cf36734246e006d",
      "occurred_at": "2026-10-01T14:18:14Z",
      "published_at": "2026-10-01T14:18:14Z",
      "first_seen_at": "2026-10-01T15:11:07.276706Z",
      "time_precision": "published",
      "update_type": "escalation",
      "material_change": true,
      "title_zh": "NEAR Intents 遭 380 万美元漏洞利用，加密行业黑客频发的一年仍在继续",
      "title_en": "NEAR Intents hit by $3.8 million exploit as crypto's rough year of hacks continues",
      "what_changed_zh": "新报道披露受影响网络范围扩大：除 BSC、Polygon、TON 外，Optimism、Avalanche、Stellar、Monad、X Layer、ADI、Scroll 和 Plasma 的充提也出现中断；平台跨链交易量超 300 亿美元、覆盖 35 条链的细节也被提及。",
      "what_changed_en": "New report discloses expanded affected network scope: in addition to BSC, Polygon, and TON, deposit/withdrawal disruptions also affect Optimism, Avalanche, Stellar, Monad, X Layer, ADI, Scroll, and Plasma; details that the platform has processed over $30B across 35 chains are also mentioned.",
      "current_state_zh": "Near Intents 已确认其 Omni 充提基础设施与合约交互缺陷导致的攻击，损失超 380 万美元；合约漏洞已修复，核心服务预计 1 小时内恢复，但充提中断已波及 BSC、Polygon、TON、Optimism、Avalanche、Stellar、Monad、X Layer、ADI、Scroll 和 Plasma 等多条网络，暂停时间可能延长；承诺全额赔付，已报案，被盗资金仍流向 KuCoin 并跨链至比特币，执法与安全公司正在追踪。",
      "current_state_en": "Near Intents has confirmed an exploit exceeding $3.8M caused by flaws in its Omni deposit/withdrawal infrastructure and contract interactions; the contract flaw is patched, core services are expected to resume within ~1 hour, but deposit/withdrawal disruptions now affect multiple networks including BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, X Layer, ADI, Scroll, and Plasma, with pauses potentially prolonged; full reimbursement is pledged, a report has been filed, stolen funds were routed to KuCoin and bridged to Bitcoin, and law enforcement and security firms are tracing.",
      "detailed_summary_zh": "NEAR Intents suffered a ~$3.8 million exploit traced to a bug in its Omni system and smart contract, prompting it to pause services, restrict deposits and withdrawals on several networks, and pledge full reimbursement while law enforcement and security firms trace funds routed through KuCoin and converted to bitcoin.",
      "detailed_summary_en": "NEAR Intents suffered a ~$3.8 million exploit traced to a bug in its Omni system and smart contract, prompting it to pause services, restrict deposits and withdrawals on several networks, and pledge full reimbursement while law enforcement and security firms trace funds routed through KuCoin and converted to bitcoin.",
      "background_zh": "",
      "background_en": "",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "",
      "market_impact_en": "",
      "importance_score": 7.0,
      "references": [],
      "confidence": 0.9,
      "story_ids": [
        "rss:www.coindesk.com_arc_outboundfeeds_rss_:17e8fa98b83b4099"
      ],
      "sources": [
        {
          "url": "https://www.coindesk.com/tech/2026/10/01/near-intents-hit-by-usd3-8-million-exploit-as-crypto-s-rough-year-of-hacks-continues",
          "label": "CoinDesk",
          "source_type": "rss",
          "official": false
        }
      ]
    },
    {
      "update_id": "upd_c08682101578dff7",
      "event_id": "evt_1cf36734246e006d",
      "occurred_at": "2026-10-01T15:12:03Z",
      "published_at": "2026-10-01T15:12:03Z",
      "first_seen_at": "2026-10-01T18:31:27.924841Z",
      "time_precision": "published",
      "update_type": "escalation",
      "material_change": true,
      "title_zh": "⚡️NEAR Intents攻击者或为Lazarus Group",
      "title_en": "⚡️NEAR Intents攻击者或为Lazarus Group",
      "what_changed_zh": "调查显示攻击者地址与标记为朝鲜 Lazarus Group 的地址（0x098B7...E2f96）存在交互，攻击者可能为 Lazarus Group。",
      "what_changed_en": "The attacker's address interacted with a wallet flagged as North Korea's Lazarus Group (0x098B7...E2f96), suggesting the attacker may be Lazarus Group.",
      "current_state_zh": "NEAR Intents 攻击事件持续调查中，攻击者地址被指与朝鲜 Lazarus Group 标记地址交互，攻击者或为 Lazarus Group；此前已确认损失超 380 万美元、暂停 11 个网络充提并承诺赔偿。",
      "current_state_en": "Investigation into the NEAR Intents exploit continues; the attacker's address has been linked to a wallet flagged as North Korea's Lazarus Group, suggesting the attacker may be Lazarus Group. Previously confirmed: over $3.8M loss, deposits/withdrawals suspended across 11 networks, and full compensation pledged.",
      "detailed_summary_zh": "The NEAR Intents attacker moved stolen funds to KuCoin and bridged them into BTC, with the attacker's address interacting with a wallet flagged as North Korea's Lazarus Group.",
      "detailed_summary_en": "The NEAR Intents attacker moved stolen funds to KuCoin and bridged them into BTC, with the attacker's address interacting with a wallet flagged as North Korea's Lazarus Group.",
      "background_zh": "NEAR Intents 是一项跨链兑换服务，订单由相互竞争的市场做市商撮合，官方称其已处理超过 300 亿美元、覆盖 35 条区块链的兑换。在本次漏洞利用发生前两天，它拦截了来自 Bitget 黑客的 5000 万美元兑换尝试。Bitget 首席执行官陈雅琪（Gracy Chen）与区块链分析公司 Elliptic 均指朝鲜可能是上周 Bitget 交易所被盗事件的幕后黑手，但同样未获证实。跨链桥接层屡屡成为攻击目标，例如 2022 年 Harmony 跨链桥被盗约 1 亿美元。",
      "background_en": "NEAR Intents is a cross-chain swap service that routes orders through competing market makers and says it has handled more than $30 billion in swaps across 35 blockchains. Two days before the exploit it blocked a $50 million swap attempt from the Bitget hacker. Bitget CEO Gracy Chen and analytics firm Elliptic pointed to North Korea as the likely culprit behind the Bitget exchange hack, which has also not been confirmed. Cross-chain bridging layers have repeatedly been targeted, as in the 2022 Harmony bridge hack that cost about $100 million.",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "该事件直接影响 NEAR 代币以及两天前刚推出的 Bitwise NEAR ETF，二者在漏洞事件后均出现下跌；资金经由 KuCoin 转移并换成 BTC，则涉及交易所托管和跨链桥这一洗钱通道。已披露的约 380 万美元损失相对整体市场流动性规模较小，因此更广泛的影响更可能通过市场对跨链桥与意图（intents）类基础设施的情绪传导，而非系统性的资金流动。",
      "market_impact_en": "The incident bears directly on the NEAR token and on the Bitwise NEAR ETF launched two days earlier, both of which declined after the exploit, while the routing of funds through KuCoin and into BTC touches exchange custody and cross-chain bridging as laundering channels. The disclosed loss of roughly $3.8 million is small relative to overall market liquidity, so any wider effect would travel through sentiment toward bridge and intent-based infrastructure rather than through systemic fund flows.",
      "importance_score": 7.5,
      "references": [
        {
          "url": "https://www.kucoin.com/news/flash/near-intents-and-near-com-restore-after-security-incident-affecting-bsc-usdt",
          "title": "NEAR Intents and near.com Restore Following Security... | KuCoin"
        },
        {
          "url": "https://www.binance.com/en/square/post/10-01-2026-near-intents-fixes-vulnerability-in-omni-deposit-and-withdrawal-infrastructure-372609995363193",
          "title": "NEAR Intents Fixes Vulnerability in Omni Deposit and Withdrawal..."
        },
        {
          "url": "https://www.elliptic.co/insights/how-the-lazarus-group-is-stepping-up-crypto-hacks-and-changing-its-tactics/",
          "title": "How the Lazarus Group is stepping up crypto hacks and... | Elliptic"
        }
      ],
      "confidence": 0.95,
      "story_ids": [
        "telegram:theblockbeats:198636"
      ],
      "sources": [
        {
          "url": "https://m.theblockbeats.info/flash/369956?from=telegram",
          "label": "theblockbeats",
          "source_type": "telegram",
          "official": false
        }
      ]
    },
    {
      "update_id": "upd_4ed585036ab97802",
      "event_id": "evt_1cf36734246e006d",
      "occurred_at": "2026-10-02T02:02:13Z",
      "published_at": "2026-10-02T02:02:13Z",
      "first_seen_at": "2026-10-02T02:32:07.621471Z",
      "time_precision": "published",
      "update_type": "response",
      "material_change": true,
      "title_zh": "NEAR Intents 称已确认黑客身份，并发出 48 小时最后通牒",
      "title_en": "NEAR Intents says its identified the hacker, gives 48-hour ultimatum",
      "what_changed_zh": "NEAR Intents 总经理 Alex Shevchenko 表示已识别出攻击者身份，并公开三个收款钱包地址（BTC、BNB、SOL），向攻击者发出 48 小时最后通牒，要求其依据负责任披露原则归还资金，否则窗口关闭。",
      "what_changed_en": "NEAR Intents general manager Alex Shevchenko said the attacker has been identified and publicly shared three wallet addresses (BTC, BNB, SOL), issuing a 48-hour ultimatum for the funds to be returned under responsible disclosure before the window closes.",
      "current_state_zh": "NEAR Intents 攻击事件中，平台称已识别攻击者身份并给出 48 小时归还资金最后通牒；此前确认损失超 380 万美元、因 Omni 充提与合约交互缺陷暂停服务、承诺全额赔付，攻击者地址被指与朝鲜 Lazarus Group 标记地址交互。",
      "current_state_en": "In the NEAR Intents exploit, the protocol says it has identified the attacker and issued a 48-hour ultimatum to return funds; previously confirmed: over $3.8M loss from a flaw in Omni deposit/withdrawal and smart contract interaction, services paused, full compensation pledged, and the attacker's address linked to a wallet flagged as North Korea's Lazarus Group.",
      "detailed_summary_zh": "NEAR Intents paused services and lost $3.8 million in user funds after a bug in its Omni deposit/withdrawal infrastructure, and its general manager says the attacker has been identified and given 48 hours to return the funds under responsible disclosure.",
      "detailed_summary_en": "NEAR Intents paused services and lost $3.8 million in user funds after a bug in its Omni deposit/withdrawal infrastructure, and its general manager says the attacker has been identified and given 48 hours to return the funds under responsible disclosure.",
      "background_zh": "",
      "background_en": "",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "",
      "market_impact_en": "",
      "importance_score": 7.0,
      "references": [],
      "confidence": 0.92,
      "story_ids": [
        "rss:cointelegraph.com_rss:b3f68a910ad66285",
        "telegram:theblockbeats:198680",
        "telegram:foresightnews:119592"
      ],
      "sources": [
        {
          "url": "https://cointelegraph.com/news/near-intents-says-its-identified-the-hacker-gives-48-hour-ultimatum?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound",
          "label": "Cointelegraph",
          "source_type": "rss",
          "official": false
        },
        {
          "url": "https://m.theblockbeats.info/flash/370000?from=telegram",
          "label": "theblockbeats",
          "source_type": "telegram",
          "official": false
        },
        {
          "url": "https://foresightnews.pro/news/h5Detail/114422",
          "label": "foresightnews",
          "source_type": "telegram",
          "official": false
        }
      ]
    },
    {
      "update_id": "upd_e51a1fbd172a60d0",
      "event_id": "evt_1cf36734246e006d",
      "occurred_at": "2026-10-02T14:04:24Z",
      "published_at": "2026-10-02T14:04:24Z",
      "first_seen_at": "2026-10-02T14:41:08.884239Z",
      "time_precision": "published",
      "update_type": "response",
      "material_change": true,
      "title_zh": "【NEAR Intents 黑客链上转账留言称愿意合作，项目方此前要求其 48 小时内归还资金】",
      "title_en": "【NEAR Intents 黑客链上转账留言称愿意合作，项目方此前要求其 48 小时内归还资金】",
      "what_changed_zh": "NEAR Intents 漏洞利用者向恢复钱包转入 1 BNB 和 0.295 ETH，并留言表示愿意合作、请求提供 Signal 联系方式，项目方回复感谢合作。",
      "what_changed_en": "The NEAR Intents exploiter transferred 1 BNB and 0.295 ETH to the recovery wallet with messages offering cooperation and requesting a Signal contact; the project replied thanking them for cooperating.",
      "current_state_zh": "NEAR Intents 攻击事件中，攻击者已通过链上转账留言表示愿意合作并请求 Signal 联系方式，项目方已确认收到并回复感谢合作；此前项目方已识别攻击者身份并发出 48 小时归还资金最后通牒，目前资金尚未全额归还，事件仍在处理中。",
      "current_state_en": "In the NEAR Intents exploit, the attacker has sent on-chain messages offering cooperation and requesting a Signal contact, and the project has acknowledged and thanked them; previously the project identified the attacker and issued a 48-hour ultimatum to return funds; full funds have not yet been returned and the situation is ongoing.",
      "detailed_summary_zh": "The NEAR Intents exploiter, who drained about $3.8M in user funds on October 1, sent on-chain transfers of 1 BNB and 0.295 ETH with messages offering to cooperate and asking for a Signal contact, prompting the project's acknowledgment a day after it identified the attacker and set a 48-hour return deadline.",
      "detailed_summary_en": "The NEAR Intents exploiter, who drained about $3.8M in user funds on October 1, sent on-chain transfers of 1 BNB and 0.295 ETH with messages offering to cooperate and asking for a Signal contact, prompting the project's acknowledgment a day after it identified the attacker and set a 48-hour return deadline.",
      "background_zh": "",
      "background_en": "",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "",
      "market_impact_en": "",
      "importance_score": 7.0,
      "references": [],
      "confidence": 0.95,
      "story_ids": [
        "telegram:foresightnews:119643"
      ],
      "sources": [
        {
          "url": "https://foresightnews.pro/news/h5Detail/114474",
          "label": "foresightnews",
          "source_type": "telegram",
          "official": false
        }
      ]
    },
    {
      "update_id": "upd_dca767695d0f206d",
      "event_id": "evt_1cf36734246e006d",
      "occurred_at": "2026-10-03T01:47:02Z",
      "published_at": "2026-10-03T01:47:02Z",
      "first_seen_at": "2026-10-03T02:17:05.649754Z",
      "time_precision": "published",
      "update_type": "resolution",
      "material_change": true,
      "title_zh": "NEAR联创谈追回被盗资金：Intents上AI安全层SHIELD锁定黑客",
      "title_en": "NEAR联创谈追回被盗资金：Intents上AI安全层SHIELD锁定黑客",
      "what_changed_zh": "NEAR 联创 Illia Polosukhin 表示，NEAR Intents 被盗资金已在不到 24 小时内锁定责任方、建立沟通，并于 UTC 时间 14:30 全额追回；追回归功于 Intents 上的 AI 安全层 SHIELD 及侦查工作。",
      "what_changed_en": "NEAR co-founder Illia Polosukhin said the stolen NEAR Intents funds were fully recovered after the responsible party was identified and contacted within 24 hours, with full recovery completed at 14:30 UTC; he credited the AI security layer SHIELD on Intents and investigative work.",
      "current_state_zh": "NEAR Intents 被盗资金已全额追回；团队称在攻击发生后不到 24 小时内锁定责任方、建立沟通，并归功于 AI 安全层 SHIELD。NEAR 表示将继续强化安全系统，事件由此进入资金追回完成后的收尾阶段。",
      "current_state_en": "The stolen NEAR Intents funds have been fully recovered; the team says it identified and contacted the responsible party within 24 hours of the attack and credited the AI security layer SHIELD. NEAR says it will continue strengthening its security systems, and the incident has moved into post-recovery wrap-up.",
      "detailed_summary_zh": "NEAR co-founder Illia Polosukhin said stolen NEAR Intents funds were fully recovered within 24 hours, crediting the protocol's AI security layer SHIELD and investigative work for identifying and recovering from the attacker.",
      "detailed_summary_en": "NEAR co-founder Illia Polosukhin said stolen NEAR Intents funds were fully recovered within 24 hours, crediting the protocol's AI security layer SHIELD and investigative work for identifying and recovering from the attacker.",
      "background_zh": "NEAR Intents是一个基于意图（intent）的跨链兑换与统一流动性协议。有关此次事件的报道称，该跨链兑换服务于10月1日遭到攻击，损失约380万美元；Intents总经理Alex Shevchenko在团队发出48小时追回期限后宣布资金已被归还。",
      "background_en": "NEAR Intents is an intent-based protocol for cross-chain swaps and unified liquidity across chains. Reports on the incident said the cross-chain swap service was exploited on October 1, that roughly $3.8 million was taken, and that Intents general manager Alex Shevchenko announced the funds had been returned after the team issued a 48-hour recovery deadline.",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "NEAR Intents处于跨链兑换与流动性赛道，因此此次追回主要通过市场对基于意图的跨链执行，以及对NEAR生态安全状况的信心产生传导，而非通过代币供应或增发变化。AI防御这一角度也可能影响其他协议如何评估面向跨链资金流的自动化监控层。",
      "market_impact_en": "NEAR Intents sits in the cross-chain swap and liquidity segment, so the recovery mainly transmits through confidence in intent-based cross-chain execution and in the security posture of the NEAR ecosystem, rather than through token supply or a change in issuance. The AI-defence angle may also shape how other protocols evaluate automated monitoring layers for cross-chain flows.",
      "importance_score": 7.5,
      "references": [
        {
          "url": "https://blockonomi.com/attacker-returns-funds-after-near-intents-issues-48-hour-recovery-deadline/",
          "title": "Attacker Returns Funds After NEAR Intents Issues 48-Hour Recovery..."
        },
        {
          "url": "https://ambcrypto.com/near-intents-ends-probe-after-exploiter-returns-stolen-3-8m/",
          "title": "NEAR Intents ends probe after exploiter returns stolen... - AMBCrypto"
        },
        {
          "url": "https://finance.yahoo.com/markets/crypto/articles/near-intents-hacker-identified-3-070359230.html",
          "title": "NEAR Intents Hacker Identified: Will $3.8M Return in 48 Hours?"
        }
      ],
      "confidence": 0.96,
      "story_ids": [
        "telegram:theblockbeats:198802"
      ],
      "sources": [
        {
          "url": "https://m.theblockbeats.info/flash/370124?from=telegram",
          "label": "theblockbeats",
          "source_type": "telegram",
          "official": false
        }
      ]
    }
  ]
}
