Nomad exploit defendant reaches U.S. court after Israel extradition

Alexander Gurevich made his initial appearance in the U.S. District Court for the Northern District of California on October 30 after being extradited from Israel, bringing a 2023 prosecution tied to the Nomad Bridge exploit into a U.S. courtroom.

The Justice Department says the indictment accuses Gurevich of causing damage to a protected computer, interstate transportation of stolen money and money laundering. The appearance is a procedural development, not a conviction or a finding that he carried out the alleged transactions. No trial date was disclosed in the department’s October 30 announcement.

The case matters beyond one bridge failure because it tests how conventional computer-crime and money-laundering statutes apply when a defendant allegedly used a smart contract’s available functions to exploit faulty authentication. Israel’s extradition proceedings addressed that threshold question without determining guilt in the U.S. charges.

What prosecutors allege

According to the Justice Department’s summary of the indictment, Gurevich allegedly executed four transactions on August 1, 2022 that transferred 103 wrapped bitcoin and 300 wrapped ether from Nomad-controlled addresses to an address he controlled. Prosecutors valued those assets at approximately $2,894,390 at the time of the transactions.

That dollar figure is the government’s event-time estimate for the assets attributed to Gurevich, not a current valuation and not the total loss from the broader Nomad incident. Wrapped tokens are blockchain representations of underlying assets, so the quantities identify what prosecutors say moved while the dollar amount depends on prices during the 2022 transaction window.

The department further alleges that Gurevich converted assets into other cryptocurrencies, including bitcoin, and moved proceeds among multiple addresses to disguise their source and control. Those assertions remain untested allegations. The government did not provide transaction hashes, a complete valuation method or a schedule for the next hearing in its announcement.

The charges carry stated statutory maximums of 10 years’ imprisonment and a $250,000 fine for the protected-computer offense, 10 years and $250,000 for interstate transportation of stolen money, and 20 years and $250,000 for money laundering. Maximum penalties are not additive sentencing forecasts; any sentence would depend on conviction, the counts sustained and the federal court’s application of sentencing law.

Why the bridge mechanics matter

Nomad allowed users to move representations of assets across separate blockchains. Its own August 5, 2022 technical analysis said an implementation bug caused its Replica contract to authenticate messages incorrectly. Unproven messages could pass into the BridgeRouter, which released tokens.

That technical history helps explain the legal dispute but does not establish who controlled any address. The Jerusalem Post, citing Israel’s State Attorney’s Office and Supreme Court proceedings, reported that Gurevich—also known as Alexander Block—argued that the transactions used functions available in Nomad’s automated system and that public blockchain records undercut the laundering allegation.

Israel’s Supreme Court rejected those arguments for extradition purposes, according to the report. It concluded that exploiting a programming flaw could qualify as unlawful computer intrusion even if the software technically allowed the operation, and that public transaction visibility did not necessarily reveal wallet control or negate concealment. An extradition ruling decides whether a person can be transferred for prosecution; it is not a U.S. verdict on the charged conduct.

What changed now

Israel transferred Gurevich to U.S. authorities on October 29, the Jerusalem Post reported, and the Justice Department confirmed his initial federal appearance the following day. That sequence converts a long-pending indictment into an active domestic prosecution.

The central uncertainty is now judicial rather than technical: prosecutors must prove the charged conduct and Gurevich’s responsibility beyond a reasonable doubt. Until a plea or verdict establishes otherwise, he is presumed innocent.