NEAR Intents says the $3.8 million drained from its platform in an exploit has been fully recovered, and the protocol has formally closed its hack investigation.

The cross-chain intent-based swap protocol confirmed the recovery in an announcement reported by Unchained. With the funds returned and the probe wound down, the episode marks a rare instance of a DeFi exploit ending in full restitution rather than permanent losses for users or a treasury write-off.

What happened in the NEAR Intents exploit?

Attackers targeted the NEAR Intents system, which routes user swap requests across chains through solvers. The incident saw roughly $3.8 million siphoned from the platform before the response began. NEAR Intents did not disclose, in the material available, a suspect attribution, and the closure of the investigation suggests the protocol considers the matter resolved without further enforcement or legal pursuit.

The recovery path was not detailed in full. Protocols in comparable cases have negotiated with exploiters through on-chain messages, engaged negotiation intermediaries, or coordinated with security firms and exchanges to trace and freeze diverted assets. NEAR Intents stated only that the exploited amount is back in its possession and that it has ended its investigation.

Why full recovery is uncommon

Exploits of this size usually end differently. Chainalysis and other blockchain-analytics firms have repeatedly found that only a fraction of funds stolen in crypto hacks are returned in a given year, with recovery rates historically well below half. Most incidents close with the protocol absorbing the loss, reimbursing users from reserves, or leaving victims unpaid.

A full return of $3.8 million therefore removes the questions that typically follow an exploit: whether the treasury can cover user balances, whether claims processes will open, and whether law enforcement involvement will delay restitution for months or years. NEAR Intents avoided all three by securing the entire amount.

What does the closure mean operationally?

Ending the investigation signals that NEAR Intents does not expect further recovery litigation, and it allows the protocol to redirect engineering and security resources from incident response to remediation. For an intents-based system whose core value proposition is reliable cross-chain execution, a resolved exploit with no net loss limits reputational damage among counterparties and solver operators.

The protocol has not, in the disclosed information, specified additional audits or changes to its smart-contract architecture in the wake of the incident. Users and integrators will be watching whether the team publishes a post-mortem — a step that has become standard practice for major DeFi platforms after security incidents, and one that would document the vulnerability class and the fixes applied.

For now, the outcome stands as a best-case resolution: $3.8 million returned, the investigation closed, and no reported user losses carried forward. Whether NEAR Intents follows with a technical post-mortem in the coming weeks will determine how much the broader cross-chain sector can learn from the incident.