< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

3 clusters · 14 sources · 31 days · First seen · Last updated

Liquid Network Bitcoin exploit and redemption freeze

Overview

On September 6, 2026, a software vulnerability in the Elements software allowed attackers to exploit the Liquid Network, enabling the unauthorized creation of L-BTC tokens without sufficient Bitcoin backing. This resulted in the unauthorized withdrawal of nearly 4,000 BTC.

Thirty-five days after the exploit, redemptions of L-BTC for on-chain Bitcoin remain suspended. While approximately 3,400 BTC were returned by actors identifying as ‘white-hat hackers’, a deficit of roughly 600 BTC remains, valued at approximately $49.69 million. The attackers have refused to release these remaining funds unless Blockstream pays a 10% reward, a proposal that Blockstream has rejected. As a result, the network’s reserves currently cover only about 86% of the L-BTC in circulation.

By October 20, 2026, the Liquid Network announced it is entering the final stages of recovery. The network has reactivated swaps between L-BTC and Bitcoin through participating providers. However, full 1:1 Bitcoin backing has not yet been restored, which is required before direct peg-outs to the Bitcoin network can be fully reactivated for authorized key holders.

While Blockstream negotiated the return of most funds, critics have noted that the attackers retained roughly 15% of the stolen assets. Redemptions remain contingent upon reestablishing complete reserves, implementing software upgrades, and completing an independent security audit of Elements v23.3.

Entities

Bitcoin · Liquid Network · Blockstream · Adam Back · Elements

Timeline

  1. [TECHNOLOGY] 6 sources
    Liquid Network enters final recovery stage after Bitcoin exploit

    Liquid Network has resumed L-BTC to Bitcoin swaps but has not yet restored its full 1:1 backing following a September exploit that resulted in a 602 BTC deficit.

  2. [TECHNOLOGY] 7 sources
    Liquid Network redemptions remain frozen after Bitcoin exploit

    Liquid Network redemptions remain frozen 35 days after a software exploit drained nearly 4,000 BTC. A 600 BTC deficit persists as attackers demand a reward, leaving reserves at 86% coverage.

  3. [TECHNOLOGY] 3 sources
    Liquid Network hack exploits software flaw to drain 4,000 BTC

    A software flaw in the Liquid Network allowed the unauthorized withdrawal of nearly 4,000 Bitcoin, valued at $319 million, without the theft of private keys.

Sources

bitcoinmagazine.com · coincu.com · criptoinforme.com · criptonoticias.com.br · criptotendencias.com · cryptobriefing.com · cryptonomist.ch · cryptoslate.com · it-boltwise.de · journalducoin.com · news.bitcoin.com · saferworld.org.uk · sify.com · thecryptocurrencypost.net

This summary has been updated 2 times: see revision history