Nomad Bridge 2022 message verification exploit

Timeline events

• Partial recovery reported2022-08

  Nomad documented returned funds and a recovery process intended to make recovered assets available to affected users on a pro-rata basis.

  Partial Recovery ReportedHigh

  The later restricted bridge relaunch is recorded separately.

• Nomad exploit disclosed2022-08-01

  The Nomad Bridge exploit became public after fraudulent withdrawals were copied by many participants.

  Exploit DisclosedHigh

• Nomad published root-cause analysis2022-08-05

  Nomad documented the initialization and message-verification flaw that allowed fraudulent messages to be accepted.

  Root Cause Analysis PublishedHigh

• Nomad recovery bridge relaunched with restrictions2022-12-20

  Affected users could bridge back madAssets and access pro-rata recovered funds, while new canonical-token deposits remained disabled.

  Recovery Bridge RelaunchedHigh

  The relaunch did not restore unrestricted new deposits.

• Nomad included in bridge-hack research context2025-01-06

  Later cross-chain bridge hack surveys use Nomad as a major reference case for message verification and bridge exploit classification.

  Research ContextMedium

  Used for context only, not as a primary incident source.

Evidence records

• Crypto bridge Nomad loses $190 million in 'chaotic' hack
  The Verge · Tier 2 · High reliability · secondary · 2022-08-02
  Claim scope: Incident Case

  Used for initial public loss framing and chaotic-copycat characterization.

• Nomad cross-chain bridge loses nearly $200 million in exploit
  Cointelegraph · Tier 2 · Medium reliability · secondary · 2022-08-02
  Claim scope: Amount

  Secondary public report used to support approximate loss scale.

• Nomad Network rekt database reference
  Rekt · Tier 3 · Medium reliability · secondary · 2022-08-02
  Claim scope: Recovery

  Used only as a lower-tier recovery/context reference in this seed record.

• SoK: A Review of Cross-Chain Bridge Hacks in 2023
  arXiv · Tier 2 · Medium reliability · secondary · 2025-01-06
  Claim scope: Incident Case

  Research context for bridge-hack classification and Nomad as a reference case.

• Nomad Bridge Hack: Root Cause Analysis
  Nomad · Tier 1 · High reliability · primary · 2022-08-05
  Claim scope: Incident Case

  Primary technical root-cause analysis.

• The Road to Recovery
  Nomad · Tier 1 · High reliability · primary · 2022-09-22
  Claim scope: Recovery

  Primary description of recovery and reimbursement planning.

• Nomad Bridge Relaunch Guide
  Nomad · Tier 1 · High reliability · primary · 2022-12-20
  Claim scope: Restart

  Primary source for the restricted recovery-oriented relaunch.

• Nomad Bridge Hack: Root Cause Analysis
  Nomad · Tier 1 · High reliability · primary · 2022-08-05
  Claim scope: Incident Case

  Event-scoped primary copy supporting the Nomad exploit case and unsafe message-verification condition.

Source tiers describe evidence authority, not certainty for every claim. Tier 1 is the strongest source class; Tier 2 and Tier 3 provide progressively more secondary or supporting context. Source notes define what each record actually supports.