NEAR
NEAR Protocol co-founder Illia Polosukhin has warned of a worsening cybersecurity environment, describing widespread software vulnerabilities as a potential “Security Armageddon” for internet infrastructure. His comments highlight growing concerns about weaknesses in legacy software, authentication systems and interconnected services, while renewed attention to AI-assisted security and formal verification could have implications for the broader blockchain industry.
In an October 22 statement on X, Polosukhin pointed to vulnerabilities affecting PHP-based systems, TLS certificates, Node.js and LiteLLM. He argued that weaknesses in widely used software components can expose applications and services to attacks, particularly when outdated dependencies and insufficient security controls remain in place.
Recent security advisories provide concrete examples of the risks. PHP maintainers disclosed a memory-handling vulnerability involving specially constructed TLS certificate names, while Node.js networking software faced separate issues involving certificate validation, connection handling and denial-of-service conditions. LiteLLM has also documented a vulnerability that could allow authenticated users to manipulate routing parameters and potentially expose provider credentials through server-side requests.
These disclosures demonstrate that individual software components can introduce serious weaknesses across interconnected systems. However, the advisories do not establish that all affected services have been compromised or that the vulnerabilities form part of a single coordinated attack.
Polosukhin called for stronger AI-assisted cybersecurity defenses, arguing that capable AI models could help developers identify vulnerabilities, examine code and accelerate remediation. He also highlighted formal verification, a technique that uses mathematical methods to assess whether software satisfies specified security and operational requirements.
For blockchain applications, formal verification can be particularly relevant when evaluating smart contracts that control assets or authorize transactions. However, proving that a mathematical model satisfies a specification does not automatically establish that the specification accurately captures the behavior of the deployed system. Reliable tooling and careful validation remain essential.
Polosukhin also advocated broader adoption of cryptographic authentication as an alternative to conventional API keys and access tokens. He argued that infrastructure should be designed to protect software and sensitive information even when the underlying hosting provider cannot be fully trusted. In the immediate term, he emphasized applying security patches, updating vulnerable components and rotating credentials.
The warning follows NEAR’s recent efforts to strengthen security across its ecosystem. On October 1, NEAR Intents resumed operations after a $3.8 million exploit involving USDT on BNB Smart Chain. Polosukhin attributed the incident to an interaction between Omni’s deposit and withdrawal infrastructure and an Intents smart contract.
The project’s SHIELD security system detected unusual activity, prompting operators to pause affected services. According to Polosukhin, developers identified and corrected the vulnerability within an hour of detection. He also pledged full compensation for affected users and said the underlying NEAR blockchain and unrelated applications were not affected.
The incident illustrates the operational risks that can emerge when blockchain services depend on interconnected contracts and external infrastructure. It does not, however, establish a direct connection between the exploit and the separate software vulnerabilities identified in Polosukhin’s October 22 warning.
Meanwhile, NEAR’s market performance has remained mixed. The token traded around $5.02 at the time of the supplied market report, down 3.61% over 24 hours but up 8.21% over the preceding week. Its reported market capitalization stood near $6.57 billion, while daily trading volume was approximately $1.08 billion.
Derivatives data showed futures open interest declining 7.45% to $1.50 billion, alongside a 6% decrease in futures trading volume to $2.56 billion. Falling open interest can indicate that outstanding leveraged positions are being reduced, although the figure alone does not reveal whether bullish or bearish positions account for the decline.
Reported spot exchange net outflows reached approximately $9.21 million on October 22. While withdrawals can reduce the supply of tokens immediately available on exchanges, they do not independently confirm accumulation or establish the direction of future price movements.
Technical indicators placed NEAR below its middle Bollinger Band near $5.066, while its Relative Strength Index stood at 52.88, below its reported RSI moving average of 55.85. These readings suggest that the token was trading near a short-term decision area rather than demonstrating an unequivocal directional signal.
Support levels identified in the supplied analysis stood near $4.80 and $4.51, with the broader trading range extending from approximately $3.79 to $5.97. Analyst Michaël van de Poppe separately highlighted $4.30 as an important level for preserving NEAR’s higher-low structure.
If NEAR recovers above $5.066 and sustains upward momentum, resistance near $5.62 could become relevant. Conversely, a break below $4.80 would place the next support around $4.51 in focus, while a deeper decline could expose the lower levels identified by analysts. These remain conditional scenarios rather than confirmed outcomes.
Polosukhin’s warning places cybersecurity alongside market performance as an important issue for NEAR and the wider digital asset sector. Stronger AI-assisted auditing, rigorous verification and improved credential management could help reduce vulnerabilities, but their effectiveness will depend on implementation, independent testing and continued maintenance. The token’s near-term direction, meanwhile, will depend on market participation and whether key technical levels hold.
Bitcoin
