Court: Code Flaw Can Be Intrusion in Nomad Extradition

Israel sent Alexander Block to the US after his appeals failed. The ruling that exploiting a coding flaw can be computer intrusion matters for every crypto community operator.

What happened

Israel has extradited an Israeli-Russian citizen to the United States to face charges over the alleged theft of about $2.8 million from crypto bridge Nomad, Israel's State Attorney's Office announced on Thursday, according to a report in The Jerusalem Post.

Alexander Block, formerly known as Alexander Gurevich, was transferred to U.S. authorities early Thursday after unsuccessful appeals in Israel. He was arrested at Ben Gurion Airport in May 2025 while preparing to fly to Russia, shortly after changing his surname and obtaining a passport in his new name.

Israel's Supreme Court rejected his appeal and ruled that exploiting a coding flaw can count as computer intrusion, even when the software allowed the transaction.

Key facts

• Israel extradited Alexander Block, formerly Alexander Gurevich, to the U.S. early Thursday.
• The charges relate to the alleged theft of about $2.8 million from Nomad in 2022.
• Prosecutors allege his exploit exposed a flaw that other users then used to drain more than $186 million from a Nomad-controlled wallet.
• Israel's Supreme Court ruled that exploiting a programming flaw can be unlawful computer intrusion even where the software permitted it.
• He was arrested at Ben Gurion Airport in May 2025 while preparing to fly to Russia, after changing his surname and obtaining a new passport.

Our analysis

The Israeli court's reasoning changes the practical meaning of "code is law" for crypto communities. A user interacting with a smart contract that allowed a transaction can still be treated as an intruder if the intent was to exploit a coding flaw. This suggests that the technical permissiveness of a protocol will not automatically shield operators, community members or security researchers from criminal exposure.

The case matters well beyond one alleged thief. Prosecutors link the $2.8 million alleged theft to a wider incident: they allege his exploit exposed a flaw that other users then used to drain more than $186 million from a Nomad-controlled wallet. That framing likely means investigators and courts may treat an initial exploit as the starting point for wider losses, not as an isolated transaction.

For crypto community operators and creators, the extradition shows that cross-border enforcement can move quickly after a change in identity and travel plans. The arrest at Ben Gurion Airport came shortly after the individual changed his surname and obtained a passport in a new name, so identity changes did not prevent detection.

What it means for operators

• Review how your community talks about exploits: avoid language that treats permissionless contract interaction as automatically legal.
• Add clear risk warnings to bridge or DeFi content so members understand that exploiting a flaw can carry legal consequences even when the software allows it.
• Monitor extradition and court rulings like this one; they can shape platform moderation, user bans and liability for community operators.
• If your audience covers Nomad or similar bridge incidents, distinguish between accidental claims and alleged exploitation rather than amplifying exploit tutorials.

This article is news and operational analysis only, not investment advice.