Nomad bridge

A $190M loss on Ethereum in 2022, caused by a cross-chain bridge flaw. Here's what happened, the vulnerability class behind it, and where it stands in ProveWall's re-proof pipeline.

$190Mreported loss

2022year

Ethereumchain

Cross-chain bridgevulnerability class

Mechanism — message-verification init flaw

✔ Re-proven on a forked chain

We re-executed this exploit against the incident state on a forked chain and it moved value — the vulnerability reproduces. We have not separately re-tested the project's post-mortem patch against it, so this page claims the reproduction only.

What this class of bug is

Bridge flaws break the link between a deposit on one chain and a mint/release on another — a bad message check or init bug lets an attacker unlock funds that were never locked.

How to read this page. The dollar figure is the publicly reported loss attributed to this incident. A ProveWall re-proof reproduces the vulnerability class/mechanism by execution on a forked chain, with a signed receipt — we say so explicitly only once that execution has passed.

Other cross-chain bridge exploits

Same vulnerability class, re-proven or queued on the wall: Qubit bridge

Want your own contract actually proven — not guessed?

Static tools and LLM auditors ask "is there a check here?" and miss the check that exists but is wrong. OmniGuard Labs runs the exploit on a forked chain and sends you a signed pass/fail receipt. Request a proof-backed audit →

Incident pages summarize public exploits for research; re-proofs execute on a forked chain and every claim is independently verifiable.