Osmosis Missed 40 BTC Exploitation for Over Two Months

A serious security flaw went unnoticed on the Osmosis exchange for over two months. Back on June 25, an attacker used two bugs to mint roughly 40 nBTC tokens without any actual Bitcoin backing. The issue remained hidden until the Nomic protocol was halted, forcing an internal audit that finally exposed the missing funds.

While the attacker successfully moved about $1 million in stolen assets into a privacy mixer, Osmosis managed to freeze a portion of the funds through an emergency upgrade. The exchange is now working to cover the shortfall by utilizing its Community Pool and canceling planned liquidity redeployments to ensure allBTC remains fully backed.

This incident highlights a growing concern regarding security oversight in the Cosmos ecosystem. Nomic appears to be inactive, with its social media and code repositories showing little to no activity for years. The delay in detecting this vulnerability has raised questions about how individual projects monitor their bridge connections and overall asset security.

Moving forward, the Osmosis governance team is debating the best path to restore full liquidity. Traders should monitor future community proposals, as the exchange works to repair its reserves and tighten security procedures to prevent similar bridge exploits in the future.