NEAR Intents / HOT Bridge BNB vault exploit attacker wallets
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-14
- Last updated: 2026-10-16
BscScan labels the recipient 'Near Intents Exploiter 1'. NEAR Intents' GM later said the funds were returned in full (2026-10-02). Addresses: BNB Chain attacker wallet 0x09fd1f5d9f185067a92493e43aa259ea4ab3ad37; Bitcoin hub on the attacker's laundering route bc1qsyrcmlxj9kaglnmqetwghnvssqjezs6pqwtsn8 (received 34.69 BTC via Chainflip, THORChain, NEAR Intents and a swap service); four Bitcoin wallets that received the hub's distributions (bc1qzsrx..., bc1qjkdz..., bc1qkm5d..., bc1q4kdd...; later sent to the recovery address); Hyperliquid account 0x0e77cbf891b90c73e2fc5dff6d78ec2e383c8616 that…
Other addresses in this report: 0x09fd1f5d9f185067a92493e43aa259ea4ab3ad37, bc1qsyrcmlxj9kaglnmqetwghnvssqjezs6pqwtsn8, bc1qzsrxkzwdah6343kj4rafr56v84xrzuzrlhvtn8, bc1qjkdzyt845q0vte6sax2nn9j40zdalec3q4zmrc, bc1qkm5d88p472cg73n7tgw8dpv243v36jjmmnzktz, bc1q4kddgqsuqmwmzq3qgv0aq2jr9jgdwesx0wljen