Israel Extradites Alleged Nomad Bridge Exploiter to US Over $2.8M Theft: Report
Israel extradited Alexander Block to the U.S. for allegedly exploiting a Nomad Bridge flaw that led to a $2.8 million theft and helped trigger a $186 million drain.

Introduction
Israel’s Supreme Court has cleared the way for the extradition of Alexander Block (formerly Alexander Gurevich) to the United States, where he faces federal charges tied to a 2022 exploit of the crypto bridge Nomad. The case highlights how a seemingly minor smart‑contract flaw can become the basis for a major computer‑intrusion prosecution, even when the software itself allowed the transaction.
---
The alleged exploit and its fallout
Block, operating under the online handle “Bitlik,” is accused of discovering a coding error introduced in a June 2022 update to Nomad’s smart contracts. The flaw let users receive tokens on one blockchain without locking the equivalent assets on the counterpart chain. Block allegedly performed a series of test transfers before executing four larger moves on August 1, 2022, siphoning roughly $2.8 million in tokens.
After moving the stolen assets through multiple wallets and converting them into other cryptocurrencies, Block reportedly contacted a senior Nomad official on Telegram, offering to return the remainder of the funds in exchange for a payment. The offer was later withdrawn, and Nomad reported the incident to U.S. law‑enforcement agencies.
The exploit’s public exposure triggered a cascade of copy‑cat attacks. Within days, other actors drained a Nomad‑controlled wallet holding more than $186 million in user funds, turning the incident into a “frenzied free‑for‑all,” according to researchers who observed the rapid replication of the attack.
---
Legal proceedings in Israel
The Jerusalem District Court approved Block’s extradition in July 2025. On appeal, Block argued that the transactions used functions explicitly available in Nomad’s automated system and that the transparent nature of blockchain records should undermine money‑laundering allegations. Israel’s Supreme Court rejected both points, ruling that:
- Exploiting a programming flaw can constitute unlawful computer intrusion, even if the software technically permits the action.
- Public blockchain data does not automatically reveal the individuals behind wallet addresses nor eliminate the possibility of concealment.
Supreme Court President Isaac Amit also denied Block’s request for a further hearing, cementing the extradition order.
---
U.S. charges and next steps
Block was transferred to U.S. authorities at Ben Gurion Airport in May 2025 after a brief detention. A federal grand jury in the Northern District of California previously indicted him (August 2023) on:
- Four counts of computer fraud
- One count of transporting stolen property
- Three counts of money laundering
The U.S. request for extradition was filed in December 2024, and the Israeli courts’ recent rulings have satisfied the legal prerequisites for transfer. Block is now awaiting arraignment in California, where prosecutors will likely seek a plea agreement or trial based on the extensive digital‑forensic evidence.
---
Implications for the crypto ecosystem
The case underscores several emerging trends in cryptocurrency regulation:
- Legal precedent on software flaws: Courts are increasingly willing to treat the exploitation of coding errors as criminal intrusion, even when the vulnerable code is part of an open‑source or publicly accessible protocol.
- Cross‑border enforcement: The successful extradition demonstrates robust cooperation between Israeli and U.S. authorities, signaling that crypto‑related crimes will face coordinated international scrutiny.
- Risk management for bridges: Developers of cross‑chain bridges are being urged to adopt more rigorous audit practices and rapid patch deployment to mitigate the kind of systemic vulnerability that fueled the Nomad breach.
---
Closing thoughts
Block’s extradition marks a pivotal moment in the intersection of cyber‑law and decentralized finance. While the $2.8 million theft was a relatively modest sum compared to the subsequent $186 million loss, the legal outcomes may shape how future exploits are prosecuted and how bridge protocols are designed. Stakeholders—from developers to regulators—should monitor the upcoming U.S. proceedings for clues on how courts will balance technical nuance with criminal accountability in the fast‑evolving crypto landscape.
Source
Read original sourceWhy we picked this
Legal extradition over a bridge exploit is a significant regulatory/security development.