Signal

Liquid Network pauses after purported white-hat hackers withdraw 4,000 BTC

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-09-06 21:14 UTCUpdated 2026-09-07 10:20 UTC
rsstelegram
cryptobitcoinsecurityliquid_networksidechainbridge
Trend in the last 24h
Current brief openSource links open
This current signal is open on the public brief with summary, metadata, source links, and full evidence. Pro adds compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.
4 top sources shown
Cointelegraph report on the Liquid Network pause
cointelegraph.com · cointelegraph.com · 2026-09-07 05:40 UTC
Overview

Liquid Network paused operations after purported white-hat hackers withdrew about 4,000 BTC, reportedly worth $320 million, from the federation wallet backing L-BTC. Subsequent reports said the actors told Blockstream they would return most of the funds after an Elements vulnerability was patched, leaving the incident unresolved.

Entities
BlockstreamSideSwapLiquid NetworkElementsAdam BackBTCL-BTCUSDT
Why now
  • Liquid Network reportedly paused after the withdrawal was detected.
  • The reported pledge to return most of the BTC has shifted the incident into a potential recovery phase.
Why it matters
  • The reported withdrawal affected BTC reserves backing Liquid’s L-BTC issuance.
  • The incident underscores security and operational risks in federated Bitcoin sidechains and bridge infrastructure.
Evidence assessment
Recurring claims
  • Purported white-hat hackers withdrew approximately 4,000 BTC, or about $320 million, from Liquid Network’s federation wallet.
  • Liquid Network paused or disabled bridge operations while the issue was investigated.
  • The attacker reportedly said most of the BTC would be returned after the vulnerability was fixed across the network.
How sources frame it
  • Bitcoin Magazine: neutral
  • Cointelegraph: neutral
  • The Block: neutral
A reported security incident has shifted into a possible recovery effort, but the return of funds remains attributed to the attacker.
All evidence
All evidence
Cointelegraph report on the Liquid Network pause
cointelegraph.com · cointelegraph.com · 2026-09-07 05:40 UTC
The Block report on the reported repayment pledge
theblock.co · theblock.co · 2026-09-07 10:20 UTC
'Purported White-Hat Hackers' Withdraw $320M in Bitcoin From Liquid
Decrypt · decrypt.co · 2026-09-07 09:55 UTC
Bitcoin Magazine report on the federation reserve withdrawal
bitcoinmagazine.com · bitcoinmagazine.com · 2026-09-06 22:16 UTC
Show filters & breakdown
Evidence items loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 8