NEAR Intents Vault Drained of $3.87M via Valid Authorizations

A wallet funded with 10 USDT was used to drain $3.87 million from a vault on the BNB Chain that serves NEAR Intents. This incident occurred through the use of valid signed authorizations, which allowed the unauthorized withdrawal of funds from the vault. The exact mechanism of how these authorizations were exploited has not been disclosed, leaving the circumstances surrounding the incident ambiguous.

Following the incident, the team issued a 48-hour ultimatum and subsequently announced a full recovery of the funds. The investigation into the incident was closed, but the full story of how the breach occurred remains unclear. This lack of clarity raises questions about the security measures in place for the vault and the authorizations that were utilized.

The incident highlights the vulnerabilities that can exist even with valid authorizations in place. The BNB Chain's involvement indicates that tracing the movement of the drained funds could be possible, although specific addresses involved in the transaction were not provided in the description.