Liquid Network hack exploits software flaw to drain 4,000 BTC

A software vulnerability in the Liquid Network resulted in the unauthorized withdrawal of nearly 4,000 Bitcoin on September 6. According to an analysis by TRM Labs, the attack is valued at approximately $319 million.

Unlike traditional hacks that involve the theft of private keys, this incident occurred because the network's software approved a withdrawal that should not have met the necessary requirements. Attackers reportedly exploited a flaw to create L-BTC tokens without providing the underlying Bitcoin to back them, subsequently exchanging these tokens for real coins.

The event highlights a critical security distinction in the cryptocurrency sector: even if private keys remain secure, flaws in the code that validates transactions can still lead to significant fund losses. The incident also raises questions regarding the efficacy of crypto insurance in providing full repayment to affected users.