https://cointelegraph.com/news/88-of-nomad-bridge-exploiters-were-copycats-report
Copycats used the same code as the original hackers but modified the target token, token amount and recipient addresses.