Harvest Moon Exploit on NEAR Drains 1.04M GEAR and 25K USDC From Team Funds
An attacker exploited the Harvest Moon smart contract on NEAR Protocol, stealing 1.04 million GEAR tokens and 25,000 USDC from the project team. The stolen tokens were sold into the GEAR/NEAR liquidity pool on Rhea Finance, draining its liquidity. The team identified the attacker's address and is seeking recovery. GEAR's supply is significantly impacted, as the stolen amount equals 10.7% of its maximum supply. This is the second security incident in the NEAR ecosystem in a month.
How this was made
The 30-second read
Why it matters
The incident may erode confidence in NEAR‑based DeFi projects and could lead to short‑term price volatility for NEAR.
Market read
First report of a significant exploit on NEAR ecosystem; may cause short‑term NEAR price pressure.
What to watch
Potential recovery of stolen funds or insurance payouts could mitigate long‑term effects on NEAR.
Background
Harvest Moon is an idle game on NEAR; the exploit targeted its contract, not the NEAR protocol itself.
Ticker impact
Harvest Moon exploit on NEAR drained GEAR/NEAR liquidity pool, potentially pressuring NEAR price.
likely downward pressure as traders price in reduced NEAR liquidity
A 10% supply of GEAR was sold into the pool, draining NEAR reserves; such sudden liquidity loss typically depresses the base token.
Market effects
Highlights security risks in NEAR DeFi applications, may prompt tighter audits across the ecosystem.
Primarily affects NEAR users globally; no specific regional bias.
Adds to broader concerns about smart‑contract security in layer‑1 ecosystems.
Counterpoint
If the team replenishes the drained pool quickly, the price impact could be minimal.
Key entities
- applicationHarvest Moon
NEAR‑based idle game whose contract was exploited.
- teamNear Tinker Union
Team behind Harvest Moon and Meteor Wallet, reporting the exploit.
- DeFi platformRhea Finance
Liquidity pool where stolen GEAR was sold, affecting NEAR liquidity.
