According to CoinMeta, the identified attackers, NEAR and intents, have been confirmed to be responsible for causing user financial losses. The platform has demanded that they return $3.8 million within 48 hours through a "responsible disclosure" mechanism; otherwise, this window will be closed after the deadline. On Thursday, NEAR and intents suspended services after discovering a vulnerability in the infrastructure for deposit and withdrawal operations that interacted with their smart contracts. Preliminary investigations indicate that the attack resulted in the theft of $3.8 million from users' funds, and the platform has pledged to compensate the affected users in full. An on-chain investigator, zachxbt, revealed that the relevant funds were transferred to the kucoin exchange and then converted to Bitcoin across chains.