Osmosis (allBTC / Nomic Bridge Double-Spend Exploit, September 2026)
Last changed 2026-10-30 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 38 to 23. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·3zyQM8…Jxj2Summary
In September 2026, Osmosis disclosed that a double-spend flaw in Nomic's custom Bitcoin bridge forwarding logic had allowed an attacker to mint roughly 39.8-40.65 unbacked nBTC and move it into Osmosis's alloyed Bitcoin (allBTC) basket, impairing an estimated 36% of allBTC's collateral. Osmosis said the underlying attack activity dated to late June 2026 but was not publicly disclosed until September 9, 2026, a gap of roughly 74 days; Osmosis and independent researchers attribute the flaw to Nomic's bridge code rather than to a compromise of the Osmosis chain or IBC itself. Osmosis froze 22.65 BTC tied to the attacker's address via an emergency validator upgrade and proposed a governance vote to seize those funds plus a community-pool top-up to restore full backing, but as of the most recent reporting that remediation had not been executed.
Connected Entities
8 entities · 60 linked investigations- Osmosis (allBTC / Nomic Bridge Double-Spend Exploit, September 2026)→mentioned with→Ethereum(70%)
- Osmosis (allBTC / Nomic Bridge Double-Spend Exploit, September 2026)→mentioned with→Drift(80%)
- Osmosis (allBTC / Nomic Bridge Double-Spend Exploit, September 2026)→mentioned with→Bitcoin(80%)
- Ethereum→mentioned with→Bitcoin(60%)
- Cosmos (ATOM)→mentioned with→Cosmos Labs(80%)
- Osmosis (allBTC / Nomic Bridge Double-Spend Exploit, September 2026)→mentioned with→Cosmos (ATOM)(80%)
- Osmosis (allBTC / Nomic Bridge Double-Spend Exploit, September 2026)→mentioned with→Cosmos Labs(80%)
- Osmosis (allBTC / Nomic Bridge Double-Spend Exploit, September 2026)→mentioned with→Drift Protocol(80%)
- Drift→mentioned with→Ethereum(70%)
- Cosmos (ATOM)→mentioned with→Ethereum(65%)
- + 1 more
Timeline(8 events)
June 2022
Osmosis liquidity pool bug exploited for roughly $5 million; chain halted by validators
The BlockDecember 2023
Levana, a perpetuals protocol on Osmosis, loses over $1.1 million in an attack combining an Osmosis fee-market issue with stale oracle pricing
The BlockJune 2026
Attacker exploits double-spend flaw in Nomic's bridge forwarding logic, minting approximately 39.84-40.65 BTC worth of unbacked nBTC across roughly 25 transfers into Osmosis's allBTC basket
CryptoSlate / Forklog, citing researcher RarmaJuly 2026
A 22.65 BTC portion of the exploited nBTC is converted into allBTC and remains at an identifiable Osmosis address
eGamers, citing researcher RarmaSeptember 2026
Independent researcher Rarma publishes on-chain analysis tracing the unbacked nBTC and allBTC shortfall
Bitcoin.com NewsSeptember 2026
Osmosis publicly discloses the exploit, freezes 22.65 BTC via emergency validator upgrade, and pauses allBTC minting, redemption, deposits and withdrawals
CryptoBriefing / eGamersSeptember 2026
News outlets report that, as of the 20 most recent on-chain proposals, no governance seizure or recapitalization measure had yet been submitted
eGamers / CryptoSlateDecision Log
- slot 463288805 · hash BSU4hDD5LfZeNedJLgGAiyfuGA5VUf7tT1eBJf7uqLPN
- slot 463288800 · hash ANsh161rgxddr8aJP5mC2WrHHEhvNWGUjLHqhRHGjur1
- slot 447103040 · hash 7nVCmA5V7XCzCBD6kNTXQf65uTDMikg9iBVtYkbAu9nG
This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 0 of 12 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 9/14/2026, 11:34:45 PM
last updated: 10/30/2026, 12:40:51 PM
8 viewsavoid.net — verified advice for a post-truth world