Liquid Attacker Returns 3,400 BTC After Patch

Highlights

The party that drained roughly 4,000 BTC from Liquid Network's federation wallet has returned 3,400 BTC.
The return followed a PGP-signed on-chain message from Blockstream confirming its bridge nodes were patched.
The attacker kept roughly 598 BTC, worth about $47 million, without confirmation it was an agreed bounty.
Security researchers remain split on whether the actor is a genuine whitehat or an opportunistic exploiter negotiating after the fact.

The party behind last weekend's roughly 4,000 BTC drain of Blockstream's Liquid Network federation wallet has sent back 3,400 BTC, worth close to $270 million at current prices, after Blockstream confirmed the underlying software flaw had been fixed, The Block reported. The original withdrawal, worth about $320 million when it occurred, emptied all but a fraction of the federation wallet's holdings through a vulnerability in Elements, the codebase underlying Liquid's sidechain, and forced Blockstream to pause the network while it investigated.

The exchange between the two sides played out entirely on-chain and through encrypted channels rather than in public statements. The party holding the funds used Bitcoin OP_RETURN messages combined with PGP-encrypted text to tell Blockstream to "fix the bug first" and confirm every affected node had been patched before any funds moved back. Blockstream, led by CEO Adam Back, responded with its own PGP-signed on-chain message stating that bridge nodes were patched and it was safe to return the funds. Shortly after, the transaction moving 3,400 BTC back to the federation address appeared on-chain. The remaining balance in the attacker's wallet — roughly 598.5 BTC, worth close to $47 million — was left untouched, with nothing in the exchanged messages explicitly confirming that amount as an agreed white-hat bounty rather than funds simply being kept.

The episode leaves Liquid Network's core security question only partially resolved. Returning 85% of drained funds is a materially better outcome than a total loss, and it suggests whoever executed the exploit was more interested in forcing a fix and extracting a reward than in laundering the full sum. But the ambiguity over the retained roughly $47 million keeps the "whitehat" framing contested: Ledger CTO Charles Guillemet publicly questioned the take-the-funds-first, negotiate-later approach as a legitimate disclosure method, before later softening his position to allow that the actors might simply be inexperienced security researchers rather than deliberate extortionists. That distinction matters for how the incident gets classified — as a disclosed vulnerability with an unusually blunt bug-bounty negotiation, or as a theft that happened to end with partial restitution.

For a network that positions itself as Bitcoin's institutional-grade sidechain for exchanges and liquidity providers, a federation-wallet drain of this size is a serious credibility test regardless of how much comes back. Liquid's federation model relies on a defined set of functionaries co-signing transactions, a design meant to be more resistant to single points of failure than a fully centralized bridge — yet the Elements vulnerability apparently let an outside party bypass that protection entirely. Institutional users who parked bitcoin on Liquid for faster settlement and confidential transactions now have a concrete data point on tail risk, and rival sidechains and bridge operators are likely to face renewed scrutiny of their own federation and multisig code in the aftermath — the same scrutiny that followed BounceBit's decision to abandon its own layer-1 after a token exploit and MANTRA's network halt after an unspecified incident earlier this year.

Blockstream has not yet detailed the exact nature of the Elements bug or whether it has published a formal post-mortem, and the network remains in a cautious posture following the pause. The next concrete marker to watch is whether Blockstream issues a public technical disclosure explaining the vulnerability and confirms all federation nodes are fully patched and the network fully operational again. Whether the roughly $47 million the attacker kept ever gets formally negotiated down, returned, or accepted as a bounty will also determine how this incident is remembered — as a costly but ultimately contained bridge bug, or as one of Bitcoin's larger sidechain security failures of the year.

FAQ

How much BTC was drained from Liquid Network?
Roughly 4,000 BTC, worth about $320 million at the time, was withdrawn from Liquid Network's federation wallet through a vulnerability in the Elements codebase.

How much BTC has been returned?
The party holding the funds returned 3,400 BTC after Blockstream confirmed its bridge nodes were patched, keeping roughly 598.5 BTC, worth about $47 million.

Is the attacker considered a genuine whitehat?
It's disputed. Ledger CTO Charles Guillemet questioned the take-first, negotiate-later approach, though he later said the actors could be inexperienced researchers rather than deliberate thieves.

Is Liquid Network operational again?
Blockstream confirmed via a signed on-chain message that its bridge nodes were patched, which is what prompted the return of funds, though a full technical post-mortem has not yet been published.