BTC $81,860.36 +0.46%
ETH $2,421.23 -0.19%
BNB $721.38 -0.00%
XRP $1.30 -0.78%
SOL $104.09 -0.86%
TRX $0.3331 -0.42%
DOGE $0.0796 -0.90%
ADA $0.2211 -1.65%
BCH $277.27 -1.91%
LINK $12.04 -2.53%
HYPE $78.95 -1.34%
AAVE $153.33 -1.68%
SUI $0.9888 -2.43%
XLM $0.1782 -1.00%
ZEC $1,148.63 -0.78%
AAPL $342.79 -0.17%
AMZN $248.55 -0.41%
GOOGL $339.15 -0.15%
MSFT $526.16 -0.49%
META $705.48 -0.55%
NVDA $213.27 -0.71%
TSLA $350.90 -0.40%
SNDK $1,268.41 -2.49%
INTC $88.94 -1.07%
SPCX $145.16 -0.59%
MU $863.08 -2.09%
AMD $526.38 -1.06%
BTC $81,860.36 +0.46%
ETH $2,421.23 -0.19%
BNB $721.38 -0.00%
XRP $1.30 -0.78%
SOL $104.09 -0.86%
TRX $0.3331 -0.42%
DOGE $0.0796 -0.90%
ADA $0.2211 -1.65%
BCH $277.27 -1.91%
LINK $12.04 -2.53%
HYPE $78.95 -1.34%
AAVE $153.33 -1.68%
SUI $0.9888 -2.43%
XLM $0.1782 -1.00%
ZEC $1,148.63 -0.78%
AAPL $342.79 -0.17%
AMZN $248.55 -0.41%
GOOGL $339.15 -0.15%
MSFT $526.16 -0.49%
META $705.48 -0.55%
NVDA $213.27 -0.71%
TSLA $350.90 -0.40%
SNDK $1,268.41 -2.49%
INTC $88.94 -1.07%
SPCX $145.16 -0.59%
MU $863.08 -2.09%
AMD $526.38 -1.06%

deposit

All
Article
Flash

first_img NEAR Intents released a post-mortem report, revealing that the $3.8 million vulnerability originated from a deposit notification flaw

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

first_img HSBC and Ant Group test AI agent tokenized deposit payments

HSBC and Ant Group tested a system that allows AI agents to access digital services and complete small payments using tokenized bank deposits, with transactions settled in real-time on a blockchain test network. This test combined HSBC's tokenized deposit service, Ant Group's Anvita Flow network, and the layer two blockchain testing environment Jovay Testnet. HSBC provided settlement capabilities and real-time risk checks, while Ant Group's network coordinated service access and payments. In the demonstration, an AI agent selected a digital service and completed the payment, with both parties referring to such transactions as small payments, typically defined as being under $2. Both companies stated that this test was limited to technical validation and does not represent a commercial release or actual services for customers.Currently, several banks are testing AI agents to initiate financial transactions on behalf of clients. In March, Spain's Santander Bank completed AI agent-initiated payments in a controlled test using Mastercard's Agent Pay infrastructure, involving the bank's real-time payment system. In May, Swiss digital asset bank Sygnum tested AI agent-driven transactions on the main blockchain network, requiring client approval and signature for each transaction. Spain's CaixaBank also completed AI agent-initiated card transactions using Visa Intelligent Commerce with existing merchant payment systems. However, Augustus Bank CEO Ferdinand Dabitz believes that traditional clearing banks rely on systems designed for manual operations decades ago, making it difficult to adapt to the demands of automated, round-the-clock transactions.
app_icon
ChainCatcher Building the Web3 world with innovations.