Nomad Bridge Exploit · interactive mechanism simulation

A June 2022 upgrade set the trusted-root default to 0x00. Because Solidity treats absent values as zero, any forged message resolving to 0x00 passed the "acceptable root" check — so anyone could copy the first exploit transaction and drain funds.
Bridge users lock & bridge tokens Copycat wallets 0 replaying Nomad token bridge $190.0M locked Replica contract root check: fixed acceptableRoot() expects committed root process() releases bridged funds
Bridge TVL remaining
$190.0 M
Total drained
$0.0 M
Wallets that replayed the exploit
0
Root check status
Secure
Parameters — edit me
$190M
5
$2.0M
1.0×
Controls

Illustrative simulation. Defaults mirror the researched mechanism (~$190M TVL, a broken acceptableRoot check treating the zero root as valid, hundreds of copycat replays), but individual withdrawal sizes and timing are randomized for visualization — not live on-chain data. Part of The Onchain Experiment Atlas.