Nomad Bridge published post-incident bounty guidance for hackers after the bridge exploit, offering white-hat treatment to parties returning most stolen funds. The report is operationally relevant CTI for cryptocurrency incident response because it documents attacker-facing recovery terms, the official recovery-wallet process, and fraud risk from impersonators during exploit remediation.