Osmosis said its Alloyed BTC product operated for 74 days with a 36% shortfall in actual collateral after a flaw in Nomics' IBC processing led to the issuance of unbacked nBTC, creating a gap that the network is now seeking to recover and recapitalize.

According to the disclosed details, the issue traces back to June 25, when the Nomics bridge processed 25 IBC transfers and issued nBTC representing 40.650602 BTC. Of that amount, 39.839746 BTC was included in Alloyed BTC despite lacking the underlying collateral that Nomics says normally backs nBTC on a 1:1 basis with Bitcoin.

Osmosis said Alloyed BTC held total assets of 110.570944 BTC, while actual collateral stood at 70.731198 BTC. That left the product with a collateral ratio of 63.97%, meaning more than a third of the reported backing was missing. The reported cause was a flaw in the IBC transfer path that allowed Osmosis to treat the transfers as normal even though the minted nBTC was not properly collateralized.

The attacker withdrew about 18 BTC from the improperly issued amount and moved the funds to Ethereum. Osmosis said chain analysis linked 671.1 ETH to transfers into Tornado Cash. The remaining 22.650608 allBTC stayed in the attacker's address and was frozen after an emergency upgrade by Osmosis.

Osmosis has proposed recovering the frozen 22.65 BTC and filling the remaining gap with Bitcoin from the community pool. The network said that if the collateral ratio is not restored, the timing of repayments and the reopening of deposits and withdrawals may depend on governance decisions. The resumption of nBTC repayments remains undecided.

Why It Matters

The case highlights a recurring risk in wrapped and cross-chain assets: a token can appear transferable and usable across protocols even when the backing assumptions underneath it have broken down. For users and venues, the issue is not only the exploit itself but also whether collateral verification, minting controls, and emergency response procedures are strong enough to prevent an asset from circulating in undercollateralized form for an extended period.

It also puts pressure on DAO treasuries and governance systems. If community funds are used to absorb losses caused by infrastructure flaws outside the immediate product, that can protect users but also shifts attention to risk management standards across interconnected bridges, issuers, and asset wrappers.