Osmosis is preparing a governance response after a software flaw in Nomic created 39.84 unbacked nBTC and left Osmosis’s Alloyed BTC 36% undercollateralized. The issue began on June 25 and, according to the reported timeline, was not detected for 74 days.
After the discovery, Osmosis froze deposits and withdrawals tied to both Nomic and Alloyed BTC, locked 22.65 BTC connected to the incident, and outlined a plan to use seized assets plus bitcoin already accumulated in the community pool to restore full backing.
How the shortfall emerged
The reported gap traces back to a Nomic bug that allowed an attacker to mint nBTC without the full bitcoin backing that the token was supposed to represent. Most of that improperly created nBTC was then placed into Osmosis’s Alloyed BTC basket, spreading the effect beyond Nomic itself.
The amount of unbacked nBTC created was 39.84, large enough to open a 36% hole in the backing of Alloyed BTC. The minting event took place on June 25, but the discrepancy remained unnoticed for 74 days before being identified.
What researchers say happened
Independent researcher Rarma reported that the flaw came from Nomic’s system counting the same bitcoin deposit twice. That process effectively produced double the nBTC for a single deposit.
According to the findings, the second, erroneous deposit became spendable. The faulty code was said to have remained in the development branch until the findings were made public, after which Osmosis issued its security update.
Immediate steps taken by Osmosis
Once the problem was found, Osmosis moved to stop further transfers involving the affected assets. Deposits and withdrawals for Nomic and Alloyed BTC were frozen as a containment measure.
Osmosis also locked 22.65 BTC linked to the incident. That sum does not cover the full 39.84 nBTC shortfall described in the report, which is why the chain is now looking at additional measures to close the gap.
Governance proposal is the next confirmed step
Osmosis said it wants governance to authorize the seizure of the locked assets and combine them with BTC that has accrued in the community pool. The stated goal is to bring Alloyed BTC back to full backing.
Based on the published outline, the recovery plan depends on a governance process rather than an automatic reversal. The immediate confirmed next step is therefore a proposal asking token holders or network governance participants to approve using the seized BTC and community-pool reserves to make Alloyed BTC whole.
Source: news.bitcoin.com