NEAR Intents suffered a $3.8 million exploit caused by a critical bug that allowed refunded deposits to generate spendable balances. The vulnerability enabled attackers to access funds that should have been invalidated upon refund processing. The team disabled the affected feature following an additional critical bug report and confirmed that all impacted users have been fully reimbursed. A postmortem detailing the technical cause and remediation steps has been published.