Osmosis Freezes 22.65 BTC After Nomic Forwarding Bug Hits allBTC
The mess in a nutshell
Osmosis has frozen 22.65 BTC after a glitch in Nomic’s custom forwarding system let someone effectively double-spend and mint bogus Bitcoin-backed tokens. That hiccup means the pooled token allBTC — which is supposed to be backed by a mix of Bitcoin variants held on Osmosis, including nBTC from the Nomic bridge — is now partly on shaky ground.
According to on-chain figures, there were about 110.57 allBTC in circulation and roughly 39.84 nBTC listed in the backing basket. Investigators found that some nBTC were created using false vouchers, casting doubt on roughly 36% of the basket’s backing. The rest of the backing still amounts to about 70.73 BTC-equivalent, but the mix is temporarily tainted.
Security researchers and incident trackers labeled the event a double-spend originating from the Nomic bridge. Osmosis stressed that the chain itself and the IBC messaging protocol weren’t breached — the bug sits in Nomic’s forwarding logic.
What’s frozen, what’s next, and why holders should pay attention
The discovery wasn’t immediate: on-chain sleuths traced the main suspect minting back to late June and flagged unmoved tokens created during mid-July activity. In response, Osmosis froze inflows and outflows for Nomic and allBTC and paused minting and redemption — basically slamming the emergency brakes while they sort things out.
The 22.65 BTC that’s frozen hasn’t been reclaimed or added back to the backing basket yet. Osmosis plans to put a governance proposal forward to seize that frozen BTC and then dip into Bitcoin held in the community pool to patch the shortfall. Even if the frozen funds are fully recovered, Osmosis would still need roughly another 17.19 BTC to make up for the damaged 39.84 BTC component — so it’s not a done deal.
Governance controls the allBTC contract and a moderator subDAO (three-of-six) can pause the pool or mark a component as corrupted. Nomic’s custody rules, meanwhile, say reserve payouts require signatures representing more than 90% of its signers — which complicates unilateral fixes. Until valid backing is restored, allBTC holders are collectively exposed because the token claims outstrip the confirmed BTC-equivalent reserves. That doesn’t mean a haircut has been finalized, but full-value redemptions now depend on what governance decides and whether the community pool can or will make up the difference.
If you’re holding allBTC, keep an eye on governance channels and proposal feeds — things like freezes, confiscations, recapitalizations, or community-pool moves will determine whether you get paid out in full or face losses. And, as always, expect a fair bit of on-chain drama before this one settles down.
