
Today SHIELD caught an attack on Intents itself. $3.8M left through a bug in the Omni deposit and withdrawal path, isolated to USDT on BSC. SHIELD flagged the outlier behaviour, Intents paused, and the fix was in within an hour of detection. The attacker had been working the hole for over four hours before that. Without the detection he had the rest of the night. Affected users are made whole in full. The NEAR protocol, the token and every other app on NEAR were untouched, because the bug lived in one application and not in the chain. For scale, Intents moves over $4B a month and this is the first major exploit it has had. The loss is about a tenth of one percent of a single month of volume. Seven withdrawals got through. The eighth did not.
