Russian-Israeli Citizen Extradited to US for $190M Nomad Bridge Hack

Alexander Gurevich, a Russian-Israeli citizen, is set to be extradited to the United States to face charges related to the $190 million Nomad bridge hack. Gurevich was arrested at an Israeli airport while attempting to board a flight to Russia. The arrest followed his return from an overseas trip on April 19, after which he was ordered to appear before the Jerusalem District Court for an extradition hearing.

Gurevich, who changed his name to Alexander Block and obtained a new passport under that name, was apprehended on May 1 while waiting to board his flight. He is accused of exploiting a vulnerability in the Nomad bridge, resulting in the theft of approximately $2.89 million worth of tokens in August 2022. This initial exploit led to a cascade of similar attacks, ultimately resulting in a total loss of $190 million.

Prosecutors allege that Gurevich reached out to Nomad's chief technology officer, James Prestwich, on Telegram shortly after the hack. Using a fake identity, Gurevich admitted to seeking a crypto protocol to exploit and apologized for the trouble he caused. He voluntarily transferred about $162,000 into a recovery wallet set up by Nomad. However, negotiations between Gurevich and Nomad broke down when Gurevich demanded a $500,000 reward for identifying the vulnerability, a demand that was not met.

The US federal authorities filed an eight-count indictment against Gurevich in the Northern District of California on August 16, 2023, and obtained a warrant for his arrest. The US submitted a formal extradition request in December 2024. The charges Gurevich faces carry a maximum sentence of 20 years, which is significantly harsher than what he would face in Israel. Israeli officials believe Gurevich carried out the attack while in the country, as he arrived just a few days before the exploit occurred.

This case highlights the complexities of international cybercrime investigations and the challenges of extradition processes. The severity of the charges and the potential sentence underscore the seriousness with which the US is treating this case. The extradition of Gurevich to the US will allow for a more thorough investigation and prosecution, given the jurisdiction where the Nomad bridge team is based.

The Nomad bridge hack serves as a stark reminder of the vulnerabilities in decentralized finance (DeFi) platforms and the need for robust security measures. The incident also underscores the importance of international cooperation in combating cybercrime, as the hack had global implications and involved individuals from different countries.

As the case progresses, it will be crucial to monitor the developments and the outcomes of the legal proceedings. The extradition of Gurevich to the US marks a significant step in the investigation, and the resolution of this case could set a precedent for future cybercrime prosecutions.