Hack history / 2022 / Hack or exploit
Nomad
Hack or exploit on Aug 1, 2022 · Forged Proof
LEGAL ACTIONSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$190M
sources: $154M to $190M
Returned
$37M
19% of the loss, as a source states it
Rank
#32
among thefts by dollars lost
What happened
On August 1, 2022, Nomad bridge was exploited when the protocol initialization set trusted roots to 0x00, matching the untrusted root value. This caused the Replica contract to accept any messages as valid, enabling 300+ copycat attackers to drain $190M total.
Details
- Date
- Aug 1, 2022
- Kind
- Hack or exploit
- Method
- Forged Proof
- How in
- Bridge and cross-chain
- Target
- DeFi protocol
- Chains
- Ethereum
After the theft
- Recovered or frozen
- $37M
“$190.0M taken, $153.0M after recovery or freezing” (Web3 Is Going Great)
Legal action
- 2026-10-30 · Extradited · US DOJ: Israeli National Extradited to Face Charges for Stealing Nearly $3M in Virtual Currency Heist ↗
US Department of Justice press releases that name this incident. A charge is an allegation; defendants are presumed innocent unless proven guilty.
Cite this page
SwanBluechip, "Nomad hack, Aug 1, 2022: $190M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hta1393e86c2/ (data as of 2026-11-01).