NEAR Intents Attacker Moves $3.86M to KuCoin, Possibly Linked to Lazarus Group

The movement of stolen funds to a major exchange and the cross-chain swap into BTC are the classic laundering steps that make recovery harder, and the suspected Lazarus link — if confirmed — would place this in a well-documented pattern of state-linked crypto theft rather than ordinary exploit activity. The more consequential detail for users is NEAR Intents' commitment to full reimbursement, which shifts the immediate loss off depositors and onto the protocol's balance sheet. Whether KuCoin freezes the flagged addresses, and whether the Lazarus attribution holds up, are the open questions.