Liquid Network Freezes Transactions After $320 Million Bitcoin Reserve Exploit

The Liquid Network has frozen all new transactions after purported white-hat hackers withdrew approximately 4,000 BTC from its federation wallet. The incident, involving assets valued at roughly $320 million, has forced the Bitcoin sidechain to halt operations to prevent further losses.

Reports from CoinDesk and Cointelegraph indicate the actors targeted the federation wallet, which held a total of 4,200 BTC. The exploit did not result from a breach of private keys or hardware security modules; instead, it originated from a critical software bug within the Elements system at the node level. Following the withdrawal, the funds were moved through the SideSwap trading platform.

The Technical Failure

Launched in 2018 by Blockstream, Liquid serves as a sidechain designed primarily for exchanges and asset managers to settle trades with greater speed than the main Bitcoin blockchain. The system operates by issuing L-BTC, a token backed by Bitcoin locked in a reserve. By draining nearly the entire reserve, the exploit directly undermines the collateralized security model that ensures L-BTC maintains its value relative to Bitcoin.

Industry Implications

This vulnerability is particularly concerning because Liquid is utilized by a federation of more than 80 institutional participants. A failure in the reserve's security threatens to destabilize the L-BTC peg and could disrupt the settlement workflows of the exchanges and financial institutions that rely on the network for liquidity. The incident underscores a systemic risk where a single software flaw at the node level can jeopardize hundreds of millions of dollars in collateral.

Path to Recovery

The actors behind the exploit have communicated their intentions via on-chain messages, claiming to be white-hat hackers. They have offered to return the withdrawn funds, but only under the condition that the vulnerability is fully remediated. In a message reported by CoinDesk, the actors stated, "Please fix the bug first. The chain is under risk at latest commit right now. Make sure every node is patched. Then we will transfer the money back safely after confirming the fix."

Network operators must now coordinate a comprehensive patch across all federation nodes before the funds can be safely recovered. The industry is watching to see if the actors fulfill their promise or if the reserve remains depleted, which would leave the L-BTC ecosystem severely under-collateralized.