Liquid Network Suffers Massive Bitcoin Heist: $270M Returned, $47M Still Missing
A significant security breach occurred on the Liquid Network over the weekend when malicious actors extracted approximately 4,000 Bitcoin from the federation's custody wallet. This wallet serves as the backing mechanism for L-BTC, maintaining a 1:1 peg with the sidechain's primary asset.
The attackers used SideSwap's Peg-out Authorization Key to execute the unauthorized withdrawal, which originated from a flaw within Elements, the open-source codebase that powers Liquid Network. The security weakness was not caused by a breach or compromise of the key itself.
Following the exploit, only 197 BTC remained in reserves from an initial holding of roughly 4,200 BTC, causing L-BTC to immediately lose its full collateralization. Blockstream initiated communication with the attackers via cryptographically signed messages within Bitcoin transactions.
The majority of stolen funds have been returned, with 3,400 Bitcoin worth around $270 million transferred back to the federation's custody wallet. However, approximately 598 BTC remains unaccounted for and valued at around $47 million. The designation of these attackers as 'whitehats' has sparked controversy within the crypto community.