Osmosis confirmed that an exploit on the Nomic chain allowed an attacker to double-spend nBTC and send fraudulent vouchers, and the attacker-controlled address is now holding frozen 22.65 BTC, according to WuBlockchain report.
The incident adds another Bitcoin cross-chain security case at a time when bitcoin-linked markets are still absorbing the Bitcoin and Ether ETFs Draw $1.2B as Spot Leads Rally story, but the nBTC problem is a contract and finality risk rather than a spot flow problem.
It also lands after separate bridge scrutiny where hardware wallet and Bitcoin infrastructure participants questioned unusual peg-out activity, including the Ledger CTO: 4,000 BTC Pegged Out of Liquid Bridge, ‘Whitehat’ Claim Raises Doubts report.
The freeze of 22.65 BTC is a direct reminder that even bitcoin-pegged assets can carry distinct custody and minting risks; this is why some investors, such as Qiao Wang Says His Personal Crypto Portfolio Holds Only Bitcoin and Zcash, keep exposure to native Bitcoin rather than wrapped or bridged representations.
What the Nomic nBTC exploit reveals about cross-chain finality
Bridged bitcoin representations rely on the issuing chain confirming the bitcoin-side deposit before minting nBTC. In this case, a double-spend on the Nomic chain appears to have allowed the attacker to reuse the same backing BTC or mint nBTC without equivalent value, producing fake vouchers that Osmosis then had to isolate.
The response so far has focused on freezing the affected address, but on-chain freezes on a public chain are not always permanent and depend on coordinator, validator, or governance action. The key question for users is whether the underlying bitcoin is still recoverable and whether nBTC redemption requests can be processed without passing the loss to other liquidity providers.
What to watch after the 22.65 BTC freeze
The main near-term signal is whether Nomic and Osmosis publish a full post-mortem showing the exact failure path, the affected block range, and the plan for making nBTC holders whole. A second signal is whether other nBTC-adjacent pools or lending markets pause or add risk parameters after the disclosure.
For market participants, the event is not a broad Bitcoin consensus failure, but it does show that cross-chain bitcoin products require independent security review. The 22.65 BTC freeze may limit immediate losses, but the incident will likely sharpen due diligence around bridged Bitcoin assets across DeFi venues.
