Article reading time:
Unknown people managed to hack into the network bridge of the decentralized finance project Nomad and completely devastate it. Experts called the attack "the most chaotic hack" in the industry.
The smart contract of the Nomad bridge containedvarious tokens for $190.7 million. On Wednesday morning, August 2, hackers managed to withdraw almost everything, there were about $650 worth of assets left in the smart contract. At the same time, they devastated the bridge with the help of many transactions and it seems that at least a few people participated in the attack.
According to a computer specialistsecurity under the pseudonym sacssun, during the usual minor update of the smart contract, the developers made a mistake, as a result of which almost any transaction sent to the contract was automatically approved. As a result, the attackers did not need to have a good knowledge of the Solidity programming language or understand information security. In fact, anyone could take an already completed transaction, change the recipient's address in it to their own and send it to the contract.
The developers said they are investigating the issue andmore details will be provided later. However, given that the project was completely devastated, this is unlikely to console users who have lost funds.
The attackers withdrew WBTC, WETH, USDC tokens,FRAX, CQT, HBOT, IAG, DAI, GERO, CARDS, SDL and C3 from the Nomad bridge. It allowed the exchange of tokens between the Ethereum networks, Avalanche, Evmos, Mikomeda C1 and Moonbeam.
Just a few days ago, the Nomad project raised over $22 million in funding from companies including Coinbase Ventures and OpenSea. The capitalization of the project reached $225 million.
The Nirvana Finance DeFi project on the Solana blockchain was recently hacked. The hacker managed to withdraw $3.5 million.