Summary
NEAR Intents has fully recovered the $3.8 million exploited in an attack against its protocol following an on-chain ultimatum to the exploiter. The ultimatum offered a bounty for returning the funds within a fixed window, with the implicit threat of full law enforcement cooperation and on-chain blacklisting if funds were not returned. The full recovery is a positive outcome for NEAR Intents users.
Timeline
| Date | Event |
|---|---|
| Sep 29, 2026 | NEAR Intents blocks $50M in Bitget hacker swaps; TTO-2026-0929-180 published |
| Oct 3, 2026 | NEAR Intents $3.8M exploit fully recovered following on-chain ultimatum |
What Happened
On-chain ultimatums have become the standard first response to DeFi protocol exploits because they offer the exploiter a face-saving exit through the bounty mechanism while creating significant disincentives for keeping the funds. An exploiter who accepts the bounty avoids law enforcement pursuit, retains a portion of the proceeds as a legitimate bug bounty, and avoids the increasingly difficult task of laundering stolen cryptocurrency. Full recovery through ultimatum is now achieved in a significant fraction of DeFi exploits.
Domain Intelligence
near.org — 61.87
near.org scores in the low-trust range at 61.87. NEAR Protocol is the platform that successfully recovered the exploited funds.