May 18, 2025
May 5, 2025

$190 Million Crypto Heist: The Capture of Alexander Gurevich

The Arrest of Alexander Gurevich: Unraveling the $190 Million Nomad Exploit

Israeli police at Ben-Gurion Airport arrested dual Israeli–Russian citizen Alexander Gurevich last week, just moments before he boarded a flight to Moscow. Gurevich—who recently changed his name to “Alexander Block”—tried to flee under this new identity, linking himself directly to the $190 Million Crypto Heist that crippled the Nomad bridge.

The Genesis of the Nomad Exploit

In the dramatic lead-up to the $190 Million Crypto Heist, Gurevich exploited a critical flaw in Nomad’s smart-contract system in August 2022. He initiated a transaction that warped the bridge’s code and siphoned off $2.89 million in tokens. His move delivered a personal windfall and triggered a catastrophic chain reaction.The transaction was akin to firing a flare into the digital ether, signaling other opportunistic watchers. Within minutes, a horde of copycats replicated Gurevich’s method, leading to a frenzied looting that drained Nomad’s reserves almost entirely. According to a detailed postmortem by Coinbase’s blockchain intelligence team, about 90% of the addresses involved were copycats, collectively siphoning around $88 million.

Legal Repercussions and Extradition

The swift response from Israeli authorities, acting on a U.S. extradition request, underscores the international cooperation prevalent in today's digital crime landscape. Specifically, the U.S. authorities had charged Gurevich with multiple federal crimes, including money laundering, wire fraud, and computer intrusion, as detailed in an indictment filed in the Northern District of California.

Subsequently, Gurevich reached out to Nomad’s CTO, James Prestwich, three days post-exploit under a pseudonym. He confessed to "amateurishly probing" the protocol, returned approximately $162,000 in tokens, and audaciously demanded a $500,000 reward. However, the negotiations fizzled out after Nomad countered with a mere 10% of his demand. Consequently, no agreement was reached.

Impact on Nomad and the Crypto Community

Nomad’s breach scarred the crypto community and exposed just how vulnerable smart contracts remain, ultimately showing how easily bad actors can siphon off digital assets. To mitigate the damage, Nomad offered a 10% bounty and retrieved roughly $37 million, yet thieves still hold most of the tokens and have scattered them across countless wallets.

Moreover, this incident not only emphasizes the need for robust security measures but also showcases the challenges in web3 talent acquisition, particularly in areas of cybersecurity and ethical hacking. Consequently, as blockchain technologies continue to evolve, the demand for professionals who can navigate these complex landscapes and safeguard digital assets against such vulnerabilities is becoming increasingly paramount.

For more insights into blockchain security and the latest trends in crypto recruitment, explore our extensive resources at Spectrum Search, your premier web3 recruitment agency.Stay updated with the latest developments in the blockchain world by subscribing to our Daily Debrief Newsletter, featuring top news stories, original features, podcasts, videos, and more.