The attackers behind the $6.3B Binance exploit have been probing cross-chain swap venues to move stolen funds, and NEAR Intents has cut them off. The protocol has refused to process more than 500 million swap quotes from the hackers since the incident, its general manager Alex Shevchenko said.

The Oct. 29 exploit has been attributed by the FBI to North Korea's TraderTraitor group. Security Alliance estimates the hackers had about eight weeks of access to Binance systems before draining the funds.

Intent-based swap protocols are a common exit route for stolen assets because they route orders across many chains in one step. Refusing quotes at the protocol level closes one path, but the attackers still have other venues to launder through.