NEAR Intents has recovered the full $3.8 million taken in a recent hack of the cross-chain protocol, according to the project's general manager, who said the funds have been returned in their entirety.

The recovery closes out an incident that saw attackers drain $3.8 million from NEAR Intents, the interoperability service that lets users swap assets across blockchains through the NEAR ecosystem. The protocol's GM confirmed the returned funds match the original exploit amount, meaning the platform avoided a partial-loss outcome that typically follows cross-chain breaches.

Full recoveries of hacked funds remain rare in the sector. In most cross-chain exploits, attackers launder proceeds through mixers or bridge hops before any negotiation can begin, and victim protocols are left to absorb losses or socialize them among users. A complete return of $3.8 million places the NEAR Intents case among the minority of incidents resolved without net damage to the protocol's treasury.

What does the full return mean operationally?

The immediate consequence is balance-sheet preservation. NEAR Intents retains the capital that would otherwise have been written off, which matters for a service whose core function depends on holding liquidity across chains to facilitate intent-based swaps. A $3.8 million gap in that liquidity would have forced the protocol to rebuild reserves, restrict supported routes, or seek external replacement capital.

The recovery also removes a key operational unknown. Protocols that suffer unresolved exploits face lingering questions over solvency, user withdrawals and auditor scrutiny. With the funds back in full, NEAR Intents can treat the episode as a closed security incident rather than an ongoing liability.

How common are full recoveries in cross-chain hacks?

Cross-chain services have historically been among the most-targeted segments of the industry, with bridge and intent-based protocols losing billions of dollars cumulatively to exploits. Negotiated returns sometimes follow when attackers face mounting tracing pressure or when white-hat bounty terms make restitution more attractive than holding tainted funds.

In those cases, protocols typically frame the arrangement as a resolution that avoids protracted recovery litigation. The NEAR Intents GM's confirmation that the $3.8 million came back in full indicates the incident ended without a haircut for the protocol, though the project has not detailed publicly the mechanics of how the return was arranged.

What should users watch next?

The protocol's next steps will determine whether the incident leaves any lasting operational marks. Users and counterparties will look for post-mortem disclosure covering the vulnerability the attacker exploited, any changes to key management or transaction verification, and whether an external security firm has reviewed the fixes.

Until the root cause is documented, the recovery answers the question of lost funds but not the question of recurrence risk. The industry's track record shows that protocols that publish detailed incident reports and complete fresh audits tend to restore institutional confidence faster than those that treat restitution as the end of the matter. NEAR Intents' handling of that follow-through will shape how partners and liquidity providers price its risk going forward.