NEAR Intents Postmortem Ties $3.8M Exploit to Deposit Bug

The reimbursement and the removal of deposit notifications are the two facts that matter here: a full make-whole signals the loss was absorbed rather than socialized, while stripping a feature after a second critical report suggests the deposit path itself is the weak point. For users of intent-based bridging, the relevant question is whether the fix addresses the root cause or only the symptom, since a postmortem that follows a second disclosure tends to invite scrutiny of what else shares that code. Whether similar deposit flows elsewhere get re-examined is the open question.