Bitcoin sidechain Liquid paused operations after actors claiming to be white-hat hackers withdrew about 4,000 Bitcoin value $320 million from its federation pockets.
On Sunday, Liquid said that bridge nodes had been disabled, stopping new transactions, whereas exchanges had halted or had been getting ready to halt L-BTC deposits and withdrawals.
Blockstream, Liquid’s expertise supplier, began contacting the actors by way of signed onchain messages. Subsequent messages present the actors told Blockstream to patch the vulnerability and guarantee each node was up to date earlier than they’d return the funds.
Additionally they despatched encrypted technical particulars to Blockstream, according to Galaxy Digital analysis head Alex Thorn. On the time of writing, the funds had not been returned.
SideSwap said the withdrawal handed by way of its peg-out service as a buyer order utilizing its Peg-out Authorization Key (PAK), however that the important thing was not compromised. It mentioned the L-BTC used within the transaction originated from a bug in Parts, the open-source software program underpinning Liquid, relatively than SideSwap’s methods.
Cointelegraph reached out to Liquid Network and Blockstream for remark.
The withdrawn Bitcoin represented roughly 95% of the pockets’s roughly 4,200 BTC steadiness earlier than the incident. Liquid mentioned different belongings issued on the community, together with USDT, DePix and real-world belongings, had been unaffected. The sidechain remained paused whereas federation members labored to repair the vulnerability.
It is a creating story, and additional info might be added because it turns into obtainable.
Associated: ‘White hats’ take 4000 BTC from Liquid, ETFs see best inflows of 2026: Hodler’s Digest
