# Nomad: when an initialized default becomes permission to process a message

Source: https://www.web3sec.news/blog/nomad-initialization-trust
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] List default, sentinel and legacy storage meanings.
- [ ] Test unproven messages after each supported initialization and upgrade.
- [ ] Verify downstream state effects, not only helper return values.
- [ ] Review monitoring for paths that bypass expected verification.
- [ ] Reconcile legitimate pending claims before restart.

## References
- [Nomad: bridge hack root-cause analysis, 5 August 2022](https://medium.com/nomad-xyz-blog/nomad-bridge-hack-root-cause-analysis-875ad2e5aacd)
- [Nomad: the road to recovery, 17 August 2022](https://medium.com/nomad-xyz-blog/the-road-to-recovery-6abe5eec8ff1)