By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
CryptoCommunityCryptoCommunity
  • Home
  • General
  • Blockchain
  • Crypto
  • DeFi
  • Metaverse
  • NFT
Search
  • BTC
  • ETH
  • USDT
  • USDC
  • BNB
  • BUSD
  • ADA
  • XRP
  • SOL
  • DOGE
  • DOT
  • MATIC
Reading: Hackers abuse ‘chaotic’ Nomad exploit to drain almost $200M in crypto – TechCrunch
Share
Aa
CryptoCommunityCryptoCommunity
Aa
  • Home
  • General
  • Blockchain
  • Crypto
  • DeFi
  • Metaverse
  • NFT
Search
  • Home
  • General
  • Blockchain
  • Crypto
  • DeFi
  • Metaverse
  • NFT
Follow US
© 2022 Foxiz News Network. Ruby Design Company. All Rights Reserved.
CryptoCommunity > Blog > General > Hackers abuse ‘chaotic’ Nomad exploit to drain almost $200M in crypto – TechCrunch
General

Hackers abuse ‘chaotic’ Nomad exploit to drain almost $200M in crypto – TechCrunch

admin Published August 2, 2022
Last updated: 2022/08/02 at 5:49 PM
Share
SHARE

[ad_1]

Cross-chain messaging protocol Nomad has become the target of crypto’s latest nine-figure attack after hackers abused a “chaotic” security exploit to steal almost $200 million in digital assets.

Nomad, a token bridge that allows users to send and receive tokens between Avalanche (AVAX), Ethereum (ETH), Evmos (EVMOS), Moonbeam (GLMR) and Milkomeda C1 blockchains, was attacked on Monday, with hackers draining almost all of the protocol’s funds.

Approximately $190.7 million in crypto was stolen from the bridge, according to decentralized finance tracking platform defillama.com/protocol/nomad">DeFi Llama, which shows that the current total value locked — the amount of user funds deposited in a DeFi protocol — is less than $12,000 at the time of writing.

Nomad has yet to confirm how hackers were able to steal the funds. But according to samczsun, the head of security at web3 investment firm Paradigm, a recent update to one of Nomad’s smart contracts made it easy for users to spoof transactions. This meant that when a user transferred funds from one blockchain to another, Nomad allegedly never checked the amount, enabling the user to withdraw funds didn’t that didn’t belong to them. For example, a user could send 1 ETH, for example, and then manually call the smart contract on the other blockchain to receive 100 ETH. Blockchain audit company Zellic also came to the same conclusion.

“It’s like using a checkbook to withdraw funds from a bank, and the bank doesn’t verify if we actually hold enough money,” Adrian Hetman, tech lead of the triaging team at web3 bug bounty program Immunefi, told TechCrunch. “They only care that the check itself looks valid.”

12/ tl;dr a routine upgrade marked the zero hash as a valid root, which had the effect of allowing messages to be spoofed on Nomad. Attackers abused this to copy/paste transactions and quickly drained the bridge in a frenzied free-for-all

— samczsun (@samczsun) August 2, 2022

Samczun explains that, unlike most bridge attacks where a single culprit is behind the entire exploit, the “chaotic” Nomad attack was a free for all whereby opportunists flocked to steal funds from the bridge once word had got around, resulting in what the researcher described as a “frenzied free-for-all.” Blockchain security firm Peckshield said more than 41 addresses drained $152 million — or 80% of the stolen funds.

“All that was required to exploit it was to copy the original hacker’s transaction and change the original address to a custom one. Simple copy-paste,” Hetman added.

The incident affected Wrapped Ether (WETH), USD Coin (USDC), WBTC and other tokens that were drained from the bridge.

TechCrunch contacted Nomad but has yet to receive a response. However, the company took to Twitter to warn about impersonators trying to collect funds. “We’re aware of impersonators posing as Nomad and providing fraudulent addresses to collect funds,” it said. “We aren’t yet providing instructions to return bridge funds. Disregard comms from all channels other than Nomad’s official channel.”

In a separate tweet, Nomad confirmed it has notified law enforcement and retained leading firms for blockchain intelligence and forensics with an aim to “identify the accounts involved and to trace and recover the funds.”

The attack comes just days after Nomad revealed that a number of high-profile crypto investors, including Coinbase Ventures, OpenSea, Polygon and Crypto.com Capital, had participated in its $22 million April seed round, which landed the company a $225 million valuation.

“At Nomad, our goal is to make it safer to communicate across blockchains,” Nomad said last week. “We believe that secure cross-chain messaging is the key to uniting DeFi ecosystems and unlocking the true power and potential of block space, wherever it may be.”

The Nomad attack is the latest in a string of highly publicized incidents which have drawn the security of cross-chain bridges into question. Axie Infinity’s Ronin Bridge lost more than $600M in a hack in April this year and Harmony’s Horizon bridge was drained of $100 million in June.



[ad_2]

You Might Also Like

Revyze is building the TikTok of educational videos

YouTube ends the test asking users to get a premium subscription to watch 4K videos

Who is going to buy Cadillac’s $300,000 hand-built EV?

Don’t let today’s software rally improve your mood

Daily Crunch: Kanye West reaches agreement to acquire social media platform Parler

Sign Up For Daily Newsletter

Be keep up! Get the latest breaking news delivered straight to your inbox.
[mc4wp_form]
By signing up, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy. You may unsubscribe at any time.
admin August 2, 2022
Share this Article
Facebook TwitterEmail Print
Share
Previous Article The Most Popular Bitcoin Implementations in Day-to-Day Services
Next Article Dogecoin Price Spikes – Unsurprisingly – After This Tweet From Elon Musk

Latest News

earn bitcoins fast
How to earn bitcoins fast
crypto
Cryptocurrency is a Scam or Not
How to Tell If a Cryptocurrency is a Scam or Not
crypto
Losing In Cryptocurrency Trading
Tips to Avoid Losing In Cryptocurrency Trading
crypto
Sell Products Online with Bitcoins
How to Sell Products Online with Bitcoins – The Ultimate Guide
crypto

You Might also Like

Revyze is building the TikTok of educational videos

6 Min Read

YouTube ends the test asking users to get a premium subscription to watch 4K videos

2 Min Read

Who is going to buy Cadillac’s $300,000 hand-built EV?

4 Min Read

Don’t let today’s software rally improve your mood

1 Min Read

Crypto Community

  • Home
  • Crypto Calculator
  • Blog
  • Contact Us
  • Privacy Policy
  • Disclaimer
  • Terms and Conditions

Real time Cryptocurrency

  • Crypto Prices
  • Dogecoin price
  • Shibainu coin price
  • Bitcoin Price
  • Cardano Price
  • Litecoins Price

Cryptocurrency Price USD

  • Bitcoin price USD
  • Ethereum price USD
  • Tether price USD
  • BNB Price USD
  • Cardano Price USD
  • Solana Price USD
  • Peps coin Price USD
  • floki inu Price USD
  • SIA coin Price USD
CryptoCommunityCryptoCommunity
Follow US

© 2022 Cryptos Community All Rights Reserved. All logos and images used on this website are registered trademarks of their respective companies. All Rights Reserved. Cryptos Community is not liable for inaccuracies, errors, or omissions found herein. For the removal of copyrighted images, trademarks, or other issues, Contact Us. 


Removed from reading list

Undo
Welcome Back!

Sign in to your account

Lost your password?