Tools Crypto Exploit Tracker exploit-0133
Exploit record
Unbacked nBTC minted on Nomic reaches Osmosis pools
- Loss
- $3.1M
- Attack vector
- Software Bug
- Chain
- Cosmos / Osmosis
- Sector
- Bridge
What happened
An attacker minted 40.650602 nBTC with no Bitcoin behind it through 25 identical IBC transfers in a single Nomic transaction on 25 June 2026, and 39.839746 BTC-equivalent of it reached the Alloyed BTC transmuter on Osmosis. The mint surfaced in September: an emergency upgrade froze 22.650608 allBTC in the attacker’s account, 56.9% of the shortfall, and Alloyed BTC operations were suspended.
Osmosis’s 10 September forum post sets out the position: roughly 18 BTC-equivalent left through Tornado Cash ahead of the freeze, and the community pool’s 12.4838 allBTC is proposed toward restoring the peg. DefiLlama dates the incident to its 9 September disclosure and logs it at $3.15m as an unbacked cross-chain mint.
Sources
- Osmosis restore-backing planforum.osmosis.zone/t/alloyed-btc-restore-backing-after-the-n…
- DefiLlama incident recorddefillama.com/hacks
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 27 September 2026