Crypto Security Alert: Alby Hub Flaw and Nomic Exploit Put Funds at Risk

Alby confirms a critical Hub vulnerability in older versions, while a Nomic chain exploit lets an attacker double-spend nBTC on Osmosis.

Two separate security incidents hit the Bitcoin and IBC ecosystems this week. Alby confirmed a critical vulnerability in its self-hosted Hub software that could let an attacker drain funds from exposed nodes.

Around the same time, Osmosis disclosed an exploit on the Nomic chain that allowed a bad actor to double-spend nBTC and mint false vouchers. Both platforms moved quickly to contain the damage and notify users. 

The timing of the two disclosures has drawn attention to the distinct risks of self-custody tools and cross-chain bridges.

Alby Hub Vulnerability Exposes Hot Wallets to Attack

Alby said the flaw affects Hub versions v1.7.0 through v1.18.5, all released before August 2025. The bug only becomes exploitable when a user’s management API sits publicly reachable on the internet. 

An attacker who reaches that interface could gain unauthorized access and send funds out of the wallet. Alby’s Cloud Hub offering was not affected by this issue.

… Continue reading the full article at the original source below.