Liquid Network Attacker Returns 3,400 BTC, Keeps $47M — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- An attacker withdrew ~4,000 BTC (~$320 million) from Blockstream's Liquid Network federation wallet, prompting the sidechain to halt new transactions.
- Blockstream patched its bridge nodes after the exploit and confirmed it received 3,400 BTC back from the attacker, leaving roughly a $47 million hole to fill.
- The self-described white-hat retained ~598.5–600 BTC as a keep-what-you-took bounty, a framing X commentator Charles Guillemet likened to 'extortion' rather than ethical hacking.
- The underlying vulnerability dated to 2019, per X posts from Adam Simecka, who said Blockstream was actively patching the bug when the drain occurred.
- Coverage spanned 12+ outlets—The Block, CoinDesk, Reuters, Decrypt, Bitcoin Magazine, and CryptoSlate—with CryptoSlate's piece highlighting a 'tokens created out of thin air' theory for how the BTC left the sidechain.
- Reaction split sharply on X, with @grassfedbitcoin rejecting the 'inside job' theory outright while @thedesertlynx called it 'the most embarrassing moment in Bitcoin's modern history.'
Why it matters: Liquid Network is a settlement layer used by major cryptocurrency exchanges, so the 2019-dated vulnerability that went unpatched until funds actually moved represents a systemic lapse. Blockstream and its federation members now absorb a ~$47M loss, and the precedent of attackers keeping a self-negotiated bounty sets a dangerous template for future 'white-hat' drains.
Ask SkimNews
