Israel extradites alleged Nomad Bridge exploiter to US; Israeli court rules that exploiting coding flaws counts as computer intrusion.
Security & Exploits ·
Israel has extradited Alexander Block, formerly known as Alexander Gurevich, to the United States to face charges related to the alleged theft of approximately $2.8 million from the Nomad crypto bridge in 2022. Block was arrested at Ben Gurion Airport in May 2025 after changing his surname and obtaining a new passport, then transferred to U.S. authorities following unsuccessful appeals. A federal grand jury in California had indicted him in August 2023 on multiple counts including computer fraud, transporting stolen property, and money laundering.
According to the U.S. extradition request, a June 2022 software update in Nomad's smart contracts created a vulnerability allowing users to receive tokens on one blockchain without locking equivalent assets on another. Operating under the username "Bitlik," Block allegedly conducted test transfers before executing four main transfers around August 1, 2022. His actions exposed the flaw to other users, who subsequently drained more than $186 million from a Nomad-controlled wallet. Block later contacted a Nomad official offering to return tokens in exchange for payment, then ceased communication.
Israel's Supreme Court rejected Block's extradition appeals, ruling that exploiting a programming flaw constitutes unlawful computer intrusion even when the software technically permitted the action. The court also found that publicly visible blockchain transactions do not necessarily conceal the identity or financial origins behind wallets, dismissing his money laundering defense.