Osmosis took 74 days to discover 40-BTC Nomic exploit
An attacker minted over 40 BTC worth of Nomic’s nBTC out of thin air on June 25. It took Osmosis, whose allBTC later turned out to be 36% unbacked, a whole 74 days to notice. Neither of the Cosmos-based projects seemingly discovered nor disclosed the loss during that period. The exploit only came to light following a halt of the Nomic protocol, which prompted an investigation into its holdings by Osmosis. Nomic itself appears not to be actively maintained; the project’s X account last posted in 2024 and its GitHub saw its last commit two years ago. Recently, we became aware of an exploit on the Nomic chain. The exploit allowed the attacker to double-spend nBTC, allowing them to send false vouchers to Osmosis. Osmosis and IBC were not compromised, as the bug was in a custom forwarding mechanism on Nomic. 39.84 nBTC of the… — Osmosis (@osmosis) September 9, 2026 Read more: Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week ...