The Tokens Nomad bridge seems to have suffered a security failure that has allowed hackers to systematically empty the bridge funds during a series of transactions. So the company indicates on Twitter not all funds are lost since there are white glove hackers that only retire tokens with the intention of returning them when vulnerability is repaired.
Defi Llama platform , of the 190.7 million dollars that Bridge had, there are $ 651. However, Nomad has indicated on his Twitter that not all funds have been stolen, part of the funds, still not determined by the company, are retained by white glove hackers with the intention of returning them.
The first suspicious transaction, which could have been the genesis of the exploit, occurred at 21:32 UTC, when someone managed to withdraw from the 100 Wrapped Bitcoin (WBTC) bridge worth about USD 2.3 million.
As indicated in Cointelegraph, shortly after the community gave the alarm about the possible exploit, Nomad's team confirmed at 11:35 PM UTC that was aware of the "incident related to the Nomad tokens bridge", adding that "the incident is currently investigating."
In the incident they have been stolen from the WBTC bridge, Wrapped Ether (Weth), USD Coin (USDC), Frax (Frax), Covalent Query Token (CQT), Hummingbird Government Token (Hbot), IAGON (IG), DAI (DAI), Gerowallet (Gero), Card Starter (Card Starter DAO (SDL) and Charli3 (C3) tokens.
The attackers withdrew the tokens unusually, as each Token retired in almost equivalent denominations. For example, transactions with exactly 202,440,725413 USDC were executed more than 200 times.
What is a bridge?
Due to the increase in the number of blockchain networks, users need to move their currencies between different blockchain networks. The problem is that the blockchain, by its nature, prevents this since they are independent networks.
Bridges are applications that allow transactions between different networks . blockchain networks to each other so that both information and assets can be transferred between them. They work, in turn, as channels to transmit information and to communicate two networks with each other.
Nomad, specifically, is a bridge that allows tokens between avalanche networks, Ethereum, Evmos, Milomeda C1 and Moonbeam (GLMR). This robbery also affected the Moonbeam platform, since its native token was one of Nomad's exploit She was forced to enter maintenance due to the event, by a "security incident."
