Bitcoin sidechain Liquid paused operations after actors claiming to be white-hat hackers withdrew about 4,000 Bitcoin price $320 million from its federation pockets.
On Sunday, Liquid stated that bridge nodes have been disabled, stopping new transactions, whereas exchanges had halted or have been getting ready to halt L-BTC deposits and withdrawals.
Blockstream, Liquid’s expertise supplier, began contacting the actors via signed onchain messages. Subsequent messages present the actors instructed Blockstream to patch the vulnerability and guarantee each node was up to date earlier than they’d return a lot of the Bitcoin.
In addition they despatched encrypted technical particulars to Blockstream, in keeping with Galaxy Digital analysis head Alex Thorn. On the time of writing, the funds had not been returned.
SideSwap stated the withdrawal handed via its peg-out service as a buyer order utilizing its Peg-out Authorization Key (PAK), however that the important thing was not compromised. It stated the L-BTC used within the transaction originated from a bug in Parts, the open-source software program underpinning Liquid, relatively than SideSwap’s programs.
Cointelegraph reached out to Liquid Community and Blockstream for remark.
The withdrawn Bitcoin represented roughly 95% of the pockets’s roughly 4,200 BTC stability earlier than the incident. Liquid stated different property issued on the community, together with USDT, DePix and real-world property, have been unaffected. The sidechain remained paused whereas federation members labored to repair the vulnerability.
It is a creating story, and additional info shall be added because it turns into out there.
Associated: ‘White hats’ take 4000 BTC from Liquid, ETFs see finest inflows of 2026: Hodler’s Digest