Liquid Network suffers $320M hack as 4,000 BTC drained from federation wallet
The recent hack of Blockstream's Liquid Network, resulting in the loss of 4,000 BTC, has sent shockwaves through the crypto community. This incident not only raises questions about the security of Bitcoin sidechains but also has potential implications for Ethereum and the broader crypto ecosystem.
What Happened? A Major Hack on Liquid Network
On September 6, 2026, Blockstream's Liquid Network, a prominent sidechain for Bitcoin, experienced a significant security breach. Hackers exploited a flaw in the software that runs the network, allowing them to withdraw approximately 4,000 BTC, valued at around $320 million. This incident is notable not just for the amount stolen but also for the implications it has on the trustworthiness of sidechains in the cryptocurrency space.
Liquid Network is designed to facilitate faster and more private transactions for Bitcoin users, particularly institutional traders. However, the hack has raised alarms about the security of the technology that underpins these transactions. The attackers were able to create fake Liquid Bitcoin (L-BTC) tokens that were accepted by the network, which they then converted into real Bitcoin withdrawals. This incident highlights the vulnerabilities that can exist in seemingly secure systems.
Understanding the Technical Flaw
The vulnerability that led to the hack was a range-proof verification bug in the Elements software, which is the open-source codebase powering the Liquid Network. In simpler terms, a bug in the software allowed the hackers to trick the system into thinking that invalid tokens were legitimate. This flaw was critical because it bypassed the safeguards that are supposed to prevent unauthorized withdrawals from the network's federation wallet.
The federation wallet operates under a multisignature (multisig) model, which means that multiple parties must approve a transaction before it can be executed. In this case, the multisig itself was not compromised, as no federation keys were hacked. Instead, the issue lay in the software that validated the transactions before they reached the multisig, demonstrating how a single point of failure in the code can lead to catastrophic outcomes.
The Aftermath: Fund Recovery and Network Suspension
Following the hack, the attackers, who identified themselves as white-hat hackers, returned approximately 3,400 BTC after Blockstream patched the vulnerability. However, they retained around 598 BTC, which they claimed as a bounty for their actions. While this return of funds is a silver lining, the incident has left the Liquid Network in a precarious position, with all activities involving L-BTC currently suspended across exchanges.