Osmosis seizes the attacker’s stash to make Alloyed BTC whole
@osmosis has finished the recovery of Alloyed BTC (allBTC). On June 25, an attacker exploited a bug in the
@nomicbtc bridge to mint about 40 fake nBTC, and nearly all of it ended up inside allBTC. Real backing fell to about 64%, and the mint went unnoticed for 74 days.
Validators froze 22.65 $BTC the attacker still held on Sept 7, while roughly 18 BTC had already moved out through Tornado Cash. After $OSMO stakers approved the plan in a governance vote, BTC from the community pool covered the remaining 17 BTC gap.
The v32 upgrade then moved the frozen coins to an Osmosis liquidity fund. With every fake nBTC removed from the alloy, each allBTC is now backed by real Bitcoin again.