Seeing this PeckShield monitoring, the attacker address of a NEAR Intents incident has interacted with an address that has been tagged as being associated with the North Korean hacking group Lazarus Group. The funds have already been transferred to KuCoin and bridged over to BTC.
Pay attention to that “or may be.” The monitoring party is also still using uncertain wording. Address labels are just a classification made by on-chain trackers; they do not necessarily mean the person behind the address is definitely who they claim.
But what ordinary people feel is another layer of reality. As of early this morning, NEAR’s current price is $4.94, down 8.57% over the past 24 hours. When a protocol has something go wrong, with no technical details disclosed and no clear window for remediation, the price gets hit first. Holders may not even have time to figure out what happened before their positions already feel awful.
This may be the most exhausting part of on-chain security: for retail users, everything after the fact is what you end up with—how the attacker got in, which loophole they used, and whether there’s a way to save things. You can only infer from news alerts and the candlestick chart. By the time you understand it, others have already moved the funds.
What this round truly allows you to take away isn’t guessing whether Lazarus is really involved, or chasing where that last BTC ultimately went. It’s reminding yourself: don’t put too much of your net worth into a protocol you don’t fully understand. After something goes wrong, the information gap is the most expensive “tuition” retail users have to pay.
Pay attention to that “or may be.” The monitoring party is also still using uncertain wording. Address labels are just a classification made by on-chain trackers; they do not necessarily mean the person behind the address is definitely who they claim.
But what ordinary people feel is another layer of reality. As of early this morning, NEAR’s current price is $4.94, down 8.57% over the past 24 hours. When a protocol has something go wrong, with no technical details disclosed and no clear window for remediation, the price gets hit first. Holders may not even have time to figure out what happened before their positions already feel awful.
This may be the most exhausting part of on-chain security: for retail users, everything after the fact is what you end up with—how the attacker got in, which loophole they used, and whether there’s a way to save things. You can only infer from news alerts and the candlestick chart. By the time you understand it, others have already moved the funds.
What this round truly allows you to take away isn’t guessing whether Lazarus is really involved, or chasing where that last BTC ultimately went. It’s reminding yourself: don’t put too much of your net worth into a protocol you don’t fully understand. After something goes wrong, the information gap is the most expensive “tuition” retail users have to pay.