Monero Receives Partial Return of NEAR Intents Exploit Funds

Summary

• NEAR Intents recovered the full $3.8 million from its October 1 crypto-hack in mid-October 2026.
• A significant portion of the fund-recovery arrived in Monero rather than Bitcoin.
• The near-intents team must now convert the XMR holdings into usable assets.

NEAR Intents got the full 3.8 million back. Recovery wrapped up by mid October 2026. The attacker asked for a Monero address so part of the payout landed in that coin.

Privacy coins shaped the outcome.

Context

The October 1 exploit hit NEAR Intents contracts and drained roughly 3.8 million dollars. The breach fit into a wave of 2026 attacks that spotlighted cross chain risks.

Recovery hinged on direct talks with the attacker. Those talks produced a mixed return that included Monero.

Details

Only some funds arrived in Bitcoin. The rest came in Monero and the team still needs to convert it.

"NEAR Intents recovered about $3.8 million from the Oct. 1 exploit with part returned in Monero."

, TokenPost (https://www.tokenpost.com/news/technology/30735)

Monero uses ring signatures, stealth addresses, and confidential transactions. These tools hide transfer trails once coins enter the mix.

The general manager confirmed the mixed return. Conversion of the Monero slice stays on the to do list.

The attacker called for a Monero address to finish part of the repayment. That request matched the coin's focus on private value moves.

Outlook

The near-intents team will focus on converting the Monero holdings to stable assets while monitoring any residual tracing challenges posed by the privacy features.