Digital Asset
Intelligence
Security Incident · Bridge

Nomad Contract Vulnerability: $154.00M Reported Loss

·Historical incident record

Incident Overview

The Nomad Bridge, a cross-chain interoperability protocol, was attacked by hackers. This attack was due to the fact that the trusted root of the Nomad Bridge Replica contract was set to 0x0 during initialization, and the old root was not invalidated when the trusted root was modified. Constructing arbitrary messages to steal funds from the bridge, the attacker was able to extract over $190 million in value from the attack. So far, more than 40 addresses have returned over $36 million to Nomad.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodUnchecked Input Data
    Reported loss$ 28,900,000
  2. Incident date
    Target

    BNBChain

    Attack methodPseudo-authentication
    Reported loss2,000,000 BNB
  3. Incident date
    Attack methodProfanity Vulnerability
    Reported loss$ 2,000,000
  4. Incident date
    Target

    Solana

    Attack methodUnknown
    Reported loss$ 8,000,000
  5. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 1,698,423