Liquid Attacker Returns $273M, Keeps $47M — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- An attacker withdrew ~4,000 BTC (~$320M) from a Blockstream Liquid Federation wallet, forcing the Bitcoin sidechain to halt operations
- Blockstream patched its bridge nodes after the exploit, after which the attacker returned 3,400 BTC — roughly 85% of the stolen funds
- The attacker retained 598.5 BTC (~$47M) and framed the incident as a 'white hat' operation, while Charles Guillemet (@p3b7_) countered on X that holding the 600 BTC 'looks more like extortion than white-hat hacking'
- CryptoSlate reported that 'tokens created out of thin air' may explain how $320 million in Bitcoin left the Liquid sidechain, raising technical questions about the exploit's mechanics
- Joel Valenzuela (@thedesertlynx) called it 'the most embarrassing moment in Bitcoin's modern history' and singled out Blockstream's leadership (the rest of his post was truncated in the source)
- Coverage split sharply: outlets like The Register, Cointelegraph, and CryptoNinjas leaned into 'white hat' framing, while CryptoPotato, Bitcoin Magazine, and CoinDesk kept focus on the 598.5 BTC still missing and ongoing talks
- Gizmodo quantified the retained sum at $47M, framing it as hackers 'keeping $47 million for themselves' in a 'white hat operation'
Why it matters: Blockstream's Liquid Network — a Bitcoin sidechain pitched as faster, cheaper settlement — saw $320M walk out through a single bridge vulnerability, and 598.5 BTC (~$47M, about 15% of the haul) stays with the attacker under a self-styled 'white hat' label that security commentators are publicly rejecting as extortion. The episode lands directly on the credibility of federated sidechain bridges, where the gap between 'returned' and 'recovered' is now a negotiation the attacker controls.
Ask SkimNews
