On Oct 1, NEAR Intents reported a $3.8M exploit after an attacker withdrew funds they had never deposited.
The cause wa | Hanami
On Oct 1, NEAR Intents reported a $3.8M exploit after an attacker withdrew funds they had never deposited.
The cause was a bug in the handoff between a bridge and a smart contract: each side trusted the other, and no rules were enforced onchain.
The bigger question: what policy should have checked that withdrawal before the funds left?