The exploit calls the security of cross-chain token bridges into question once again.

The cross-chain token bridge Nomad was exploited Monday, with attackers draining the protocol of virtually all of its funds. The total value of cryptocurrency lost to the attack totaled near $200 million.

Nomad, like other cross-chain bridges, allows users to send and receive tokens between different blockchains. Monday’s attack is the latest in a string of highly-publicized incidents which have drawn the security of cross-chain bridges into question.

CoinDesk has reached out to Nomad for comment but hadn’t heard back at the time of writing. In a tweet, the team said it was investigating the incident.

What Happened?

Bridges typically work by locking up tokens in a smart contract on one chain and then reissuing those tokens in “wrapped” form on another chain.

If the smart contract where tokens are initially deposited gets sabotaged – as happened in Nomad’s case – the wrapped tokens no longer have any backing, which can render them worthless.

Sam Sun, a researcher at crypto investment firm Paradigm, explained on Twitter that a recent update to one of Nomad’s smart contracts made it easy for users to spoof transactions, meaning people could withdraw money from the bridge that didn’t actually belong to them.

Unlike some bridge attacks, where a single culprit is behind the entire exploit, the Nomad attack was a free for all.

“... you didn't need to know about Solidity or Merkle Trees or anything like that. All you had to do was find a transaction that worked, find/replace the other person's address with yours, and then re-broadcast it,” Sun explained.

Nomad: A 'Secure' Alternative?

Bridge attacks have become more frequent in recent months as crypto-users have demonstrated an increased appetite for swapping assets between different blockchains.

While cross-chain bridges have made it possible for upstart blockchains to proliferate, bridge failures can be devastating for smaller chains that rely on them for a large amount of their total liquidity.

Evmos, one of the newer blockchains serviced by Nomad, tweeted that it would be “brainstorming community solutions” to the Nomad attack given that it “significantly impacts initial Evmos [total value locked].”

The largest decentralized finance (DeFi) attack in history, April’s Ronin bridge attack, saw over $600 million worth of crypto siphoned out of the bridge that powers the blockchain-based game Axie Infinity.

Just a few months before that, over $300 million was drained from the Wormhole bridge, wreaking havoc across the Solana blockchain community and the wider decentralized finance (DeFi) ecosystem.

Nomad sold investors on the vision that it would be fundamentally more secure than alternative platforms.

Just last week, it revealed that crypto heavyweights Coinbase Ventures and OpenSea were among those who participated in an April seed round which valued the company at $225 million.


All writers’ opinions are their own and do not constitute financial advice in any way whatsoever. Nothing published by CoinDesk constitutes an investment recommendation, nor should any data or Content published by CoinDesk be relied upon for any investment activities. CoinDesk strongly recommends that you perform your own independent research and/or speak with a qualified investment professional before making any financial decisions.

Recommended content


Recommended Content

Editors’ Picks

Ripple Price Prediction: How tokenized treasuries could accelerate XRP to $10 by end-2025

Ripple Price Prediction: How tokenized treasuries could accelerate XRP to $10 by end-2025

The adoption of cryptocurrency-related financial products, including tokenized treasuries, is on overdrive globally, with the focus now shifting to robust networks such as Ripple's XRP Ledger (XRPL).

Sei rallies as Wyoming selects protocol for WYST stablecoin pilot

Sei rallies as Wyoming selects protocol for WYST stablecoin pilot

Sei extends gains above $0.21, decoupling the token from the broader crypto market amid low sentiment and macroeconomic uncertainty. The Wyoming Stable Token Commission selects Sei Network as a candidate blockchain for the WYST, the first fiat-backed stablecoin issued by a US state.

Crypto Today: Bitcoin, Ethereum, XRP nudge higher as geopolitical tensions take a backseat

Crypto Today: Bitcoin, Ethereum, XRP nudge higher as geopolitical tensions take a backseat

Bitcoin bulls step up, pushing the price above $106,000, as Trump said he would delay his decision about launching strikes on Iran for up to two weeks. Ethereum rebounds from the 200-day EMA support at $2,477 amid steady interest in the derivatives market.

Solana eyes trend reversal as bearish momentum bottoms out above $140

Solana eyes trend reversal as bearish momentum bottoms out above $140

Solana experiences a minor uptick of under 1% at press time on Friday, with multiple long shadow candles forming above $140 as bearish momentum fades off. The optimism surrounding Solana is on the rise, as evidenced by the SOL Open Interest reaching a weekly high.

Bitcoin Weekly Forecast: The calm before the storm

Bitcoin Weekly Forecast: The calm before the storm

Bitcoin (BTC) price remains steady above a key support level, trading slightly above $106,000 at the time of writing on Friday. The uncertainty looms as geopolitical tensions between Iran and Israel show no sign yet of an exit strategy from either side.

The Best brokers to trade EUR/USD

The Best brokers to trade EUR/USD

SPONSORED Discover the top brokers for trading EUR/USD in 2025. Our list features brokers with competitive spreads, fast execution, and powerful platforms. Whether you're a beginner or an expert, find the right partner to navigate the dynamic Forex market.

BTC

ETH

XRP