Nomic Flaw Leads to $3.15 Million Loss for Osmosis
A flaw in Nomic's forwarding logic resulted in a significant loss for Osmosis. The incident involved the minting of unbacked nBTC and the subsequent movement of funds to Tornado Cash.
A flaw in Nomic’s forwarding logic caused the minting of 40.65 unbacked nBTC, which led to Osmosis being approximately $3.15 million short in allBTC. As a response, Osmosis froze 22.65 allBTC to mitigate the impact of the incident. However, it was discovered that roughly 18 BTC-equivalent had already been transferred to Tornado Cash before the flaw was identified, which took 74 days to uncover.
The incident highlights a critical vulnerability in the forwarding mechanism of Nomic, which allowed for the creation of unbacked assets. This flaw not only affected the liquidity of Osmosis but also enabled a portion of the funds to be laundered through Tornado Cash, complicating recovery efforts. The delayed discovery of the issue raises concerns about the monitoring and auditing processes in place for such systems.
While the specific blockchain is not stated, the movement of funds to Tornado Cash indicates a use of privacy-focused mechanisms that can obscure the tracing of transactions. The on-chain record would reflect the minting of the unbacked nBTC and the subsequent transfers, but the details of those transactions are not provided in the description.
Addresses in this incident
| Address | Chain | Role | Check |
|---|---|---|---|
| 0x8f36FD9FfC0a8cA373AA7A4787292536a489d2B5 | ETH | mentioned in coverage | Check live |
Roles are attributed to the source that stated them. Addresses without an attributed role are listed because coverage mentioned them, not because we assign them a part in the incident.
