According to CoinMeta, GoPlus Security reports that a hot wallet belonging to BSC was hacked, resulting in a loss of approximately $3.87 million. The team has pledged to compensate the users. Preliminary assessments indicate that the attack originated from a vulnerability in the Omni deposit and withdrawal infrastructure, and the attack was limited to the NEAR Intents and Omni hot wallet deposit and withdrawal stack, without affecting the mainnet contracts of the NEAR protocol. The contract-side vulnerabilities have been fixed, while repairs on the Omni side are still in progress. The affected address is 0x233c5370ccfb3cd7409d9a3fb98ab94de94cb4cd, and the attacker's address is 0x09fd1f5d9f185067a92493e43aa259ea4ab3ad37. The attack process involved the hot wallet BSC being quickly routed through KuCoin to CEX, and then transferred to BTC. ZachXBT further reported that the attacker's address interacted with an address labeled Lazarus (0x098b7… e2f96), showing a typical DPRK money laundering pattern.