Faulty Merkle root init turned bridge into a free-for-all.
Attacker wallets funded and staged ahead of the bridge exploit exploit against Nomad Bridge.
$190.0M drained from Nomad Bridge on Ethereum via Bridge Exploit.
CertiK flagged the anomalous transactions and published an initial alert.
Nomad Bridge paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
$36.0M of $190.0M recovered (19%); the remainder is still unaccounted for.
Remaining funds monitored across chains with exchange partners notified.