Digital Asset
Intelligence
Security Incident · Bridge

Nomic nBTC Bridge Double-Spending Attack: $3.15M Reported Loss

·Historical incident record

Incident Overview

An attacker exploited a bug in Nomic’s custom forwarding mechanism to double-spend nBTC and send unbacked vouchers to Osmosis. Osmosis and IBC themselves were not compromised. 39.84 nBTC of the minted supply sat in Alloyed BTC (~36% of its backing). Osmosis froze Nomic and Alloyed BTC flows, upgraded with validators, and froze 22.65 BTC in the attacker’s address. Governance will be asked to seize those funds and cover the rest from the community pool.

Sources & References

Original incident referencehttps://x.com/osmosis/status/2097623097696251926 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Rocket

    Attack methodPrice Manipulation
    Reported loss$ 287,000
  2. Incident date
    Attack methodSupply Chain Attack
    Reported loss$ 118,000
  3. Incident date
    Target

    Astroport

    Attack methodCompromised administrator privileges
    Reported loss$ 4,900,000
  4. Incident date
    Target

    BeatXswap

    Attack methodPrice Manipulation
    Reported loss$ 77,512
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 140,030