Show Notes
A bridging bug cost NEAR Intents $3.8 million. Alex Shevchenko reveals how a coded tweet and a Signal invite encrypted with the attacker's key got the funds back.
========================================================
Thank you to our sponsor!
Visit 1inch.com to swap tokenized securities, crypto and more. Simple. Secure. Self-custodial. Whatever asset you’re buying - swap it at 1inch.com
========================================================
Quick favor: We're deciding what Unchained does next; new shows, stream times, what's worth paying for. Our listener survey takes five minutes, it's anonymous, and I read the write-in answers myself. Everyone who takes it can enter a drawing for a free year of Unchained Premium or Bits + Bips Premium. Open through Sunday, October 18.
— Laura
========================================================
NEAR Intents halted services after an attacker exploited a bug in its Omni bridging infrastructure and walked off with $3.8 million. Twelve hours after announcing the hack, the team tweeted at the suspect: "We have identified you, sir."
Alex Shevchenko, GM of NEAR Intents, joins Laura Shin to walk through how the attacker got the protocol to credit USDT deposits on BNB Chain that never happened, why NEAR Intents covered the loss from its own pockets, and how a Signal invite encrypted with the attacker's public key opened a private channel that ended with the funds coming back, partly in XMR.
He also lays out how Shield, NEAR Intents' detection system, kept 99% of the more than $50 million tied to the Bitget hack from passing through, and why he thinks shielded Zcash could face Monero's fate.
His argument: crypto that protects thieves can never become the economic backbone its builders want.
Host:
Laura Shin, Host / Unchained
Guest:
Alex Shevchenko - GM of NEAR Intents
Timestamps
🚨 01:43 How an Omni bridging bug let an attacker fake deposits and drain $3.8M
🌐 02:37 What NEAR Intents is, and how it relates to NEAR Protocol and near.com
⚙️ 05:01 How the hack worked and how the identified that it had occurred
💧 09:51 1inch Aqua: Back multiple positions with one token balance at https://1inch.com/aqua
🚔 10:55 Law enforcement, and how NEAR Intents identified a suspect within 12 hours
🔐 17:51 The Penn and Teller playbook: a Signal invite only the attacker could decrypt
🏎️ 22:52 Why Alex says a bug bounty beats hacking, Lambo included
🛡️ 26:24 Shield: how NEAR Intents kept 99% of Bitget hack funds off the protocol
⚖️ 32:07 Does blocking stolen funds make NEAR Intents centralized? Alex says no
🕶️ 40:17 Can shielded Zcash stay clean, or will it follow Monero's path? Learn more about your ad choices. Visit megaphone.fm/adchoices
More from Unchained
Traders tried to lose money fast to earn PAPER. Now the token may never be transferable, and one tracker shows staking revenue fell 93% in a day.
A certificate authority's private key was the number 4 for over a year. Kain, Taylor, and Austin on why the internet's trust schemes are cracking.
Justin Drake says crypto should brace for AI breaking elliptic curves before Q-Day. Project Eleven's Alex Pruden and Conor Deegan weigh in on what's actually at risk.
A hidden implant read Ledger seed phrases off the screen and sent them out over an eSIM. Mark Karpelès and SEAL 911's Jonty discuss what that means for self-custody.
A Ledger reseller's devices shipped with a hidden LTE modem inside. Taylor Monahan lays out how it passed the genuine check and why panicking now costs more.