Back to dashboard
Tuesday, August 2, 2022 at 22:00 UTC

Nomad Bridge

Faulty Merkle root init turned bridge into a free-for-all.

Partial
Funds stolen
$190.00M
Recovered
$36.00M19%
Still outstanding
$154.00M
Chain
Ethereum
Category
Bridge
Attack vector
Bridge Exploit
Reported by
CertiK
Incident ID
h2022-4

Exploit & recovery timeline

  1. Aug 2, 2022 · 20:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the bridge exploit exploit against Nomad Bridge.

  2. Aug 2, 2022 · 22:00 UTC
    Exploit executed

    $190.0M drained from Nomad Bridge on Ethereum via Bridge Exploit.

  3. Aug 2, 2022 · 23:00 UTC
    Detected by CertiK

    CertiK flagged the anomalous transactions and published an initial alert.

  4. Aug 3, 2022 · 02:00 UTC
    Protocol response

    Nomad Bridge paused affected contracts or withdrawals and began tracing outbound flows.

  5. Aug 3, 2022 · 22:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Aug 9, 2022 · 22:00 UTC
    Partial recovery

    $36.0M of $190.0M recovered (19%); the remainder is still unaccounted for.

  7. Sep 1, 2022 · 22:00 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.