Digital Attacks
Crypto bridge hack: Alexander Gurevich extradited to the US on suspicion of stealing about USD 2.9 million from the Nomad bridge and laundering it
Nomad crypto bridge hack: Israeli Alexander Gurevich extradited to the US, accused of stealing about USD 2.9M and laundering it. What it shows about tracing.
In brief
- Alexander Gurevich, a 49-year-old Israeli citizen, was extradited to the US and made his first appearance on October 30, 2026, in federal court in the Northern District of California, the US Department of Justice announced.
- According to the 2023 indictment, on or about August 1, 2022, he carried out four exploit transactions against the Nomad bridge and moved tokens with an estimated value of about USD 2.89 million to an address under his control.
- He is charged with causing damage to a protected computer, interstate transportation of stolen money and money laundering.
- Status: indictment, following extradition. Gurevich has not been convicted and is presumed innocent.
What the indictment alleges
According to the Justice Department announcement, Gurevich exploited the software that runs the bridge itself, meaning the smart contract, and carried out unauthorized transactions. In this way, according to the allegation, he moved 103 WBTC and 300 WETH from a Nomad address to an address under his control (US Department of Justice).
It is further alleged that after the theft he converted the funds into other digital currencies, including bitcoin, and moved them through numerous addresses to conceal their source and ownership (US Department of Justice).
The arrest in Israel and the extradition
According to the announcement, Gurevich was arrested in Israel in May 2025 and was recently extradited to the US, with the assistance of the Justice Department's Office of International Affairs and the Israeli authorities. According to Walla, he was arrested at Ben Gurion Airport as he was about to fly to Russia, and his appeal against the extradition was rejected (Walla). His attorney, Sharon Nahari, told Walla that weighty arguments had been raised before the Supreme Court.
The possible sentence
According to the Justice Department, the maximum penalty for causing damage to a computer and for interstate transportation of stolen money is 10 years in prison and a USD 250,000 fine for each offense, and for money laundering 20 years in prison and a USD 250,000 fine. The actual sentence, if he is convicted, will be determined by a judge (US Department of Justice).
Why blockchain tracing still works
The case shows that converting between currencies and moving funds through many addresses does not erase the trail. Every transfer is recorded, so the path of the money can be reconstructed up to the point where it meets an exchange, an identified wallet or a bank account. This is true for private victims of crypto theft as well, not only for the authorities.
Sources: US Department of Justice, 30.10.2026, Walla, 31.10.2026. Walla is in Hebrew.
Further reading: Money laundering red flags in a business, Fake profile: how to find out who is behind it, and Asset and account tracing service.
The information in this section is general and is not legal advice. An indictment is an allegation only. Alexander Gurevich has not been convicted and is presumed innocent until proven guilty in court.
