Another crypto bridge attack: Nomad loses $190 million in ‘chaotic’ hack


New York
CNN Business

Thefts continue to plague the cryptocurrency world, with news of large sums of money being stolen from crypto companies seemingly every month. But while cryptocurrency exchanges were once the main point of attack, now hackers seem to have a new target: blockchain bridges.

Bridges are the infrastructure that allows users to exchange assets between different block chains, and it is the digital database that supports the major cryptocurrencies. When the bridge service exchanges one currency for another, it “damages” the currency so that it works on the other blockchain.

The encapsulated currency doesn’t quite become another currency — it just looks like it, Tom Robinson, chief scientist at blockchain analytics firm Elliptic told CNN Business. Instead, a “token” is issued to represent the new currency on a different blockchain. “I deposit my bitcoins into the bridge. In exchange for doing this, I receive the Bitcoin token on the Ethereum blockchain, after which I can transfer the Bitcoin token, which is known as the encapsulated asset, through the Ethereum blockchain,” Robinson explains.

To support these encapsulated coins, the bridge services maintain large reserves of various coins. “You have to trust that the bridge really has the assets that back those tokens,” Robinson said. “They have a huge amount of assets that support those tokens.”

These coin reserves are attracting the attention of hackers and turning blockchain bridges into prime targets for theft, according to Elliptic. “They are just huge attractions. They own massive amounts of crypto assets, so they are very clear targets,” Robinson said.

About $1.83 billion have been stolen from bridges so far, and most of that ($1.21 billion) happened just this year, according to Elliptic. Six major bridges have been robbed so far in 2022, including Harmony Corporation is headquartered in Californiawhich lost $100 million in late June, and Ronin Bridge in Axie Infinitywhich was theft of $ 625 million in March.

In the most recent example, hackers reportedly stole $190 million worth of cryptocurrency from crypto bridge provider Nomad, according to security and data analytics firm Peckshield. (Nomad has not confirmed the total amount lost.)

“We are working around the clock to address the situation and have notified law enforcement and retained leading companies in the field of blockchain intelligence and forensics,” Nomad chirp Tuesday. “Our goal is to identify the accounts involved, track and recover funds.”

Nomad is working with chain analytics firm TRM to help track the funds in an effort to return stolen funds to users, according to A tweet posted by Nomad on Wednesday.

Bedouin first chirp Late Monday, he addressed the incident and said he was “aware of impersonators pretending to be Nomad and providing false addresses to raise money”.

according to PicshieldThe Nomad system was gradually depleted in batches, and the stolen coins included ether and some stablecoins pegged to the US dollar. A researcher at crypto investment firm Paradigm tweeted that the vulnerability was “one of the… Most messy hacks Which Web3 has ever seen.

Just days before accident, Bedouin revealed Several popular investors – including Coinbase Ventures, OpenSea, and Crypto.com Capital – who participated in April A funding round of $22 million to “help develop a security-first cross-chain messaging solution.”

The increasing number of bridge attacks is adding to the security and confidence concerns in the crypto industry. Many of the biggest cryptocurrency thefts of all time It happened just last year, Amid rising prices and use of cryptocurrencies. Cryptocurrency prices have since dropped dramatically but it is still a profitable target.

Encryption tricks have it too Became famouswhere fraudsters stole more than a billion dollars from the beginning of 2021 until March of this year, according to Report In June of the Federal Trade Commission.

FTC said in Release in time. There is no bank or other entity to report suspicious transactions before they happen. Cryptocurrency transfers cannot be reversed. Once you run out of money, you can kiss your cryptocurrency.”