Liquid Network resumes block production after $320M exploit

cointelegraphPublished on 2026-09-10Last updated on 2026-09-10

Abstract

The Liquid Network has resumed block production after a major exploit that saw approximately 4,000 Bitcoin (worth roughly $320 million) withdrawn from its federation wallet. The network was paused on September 6 following the incident, which involved a bug in the underlying Elements software. While block production has restarted as a precautionary measure, transactions and peg operations (including withdrawals) remain suspended as recovery efforts continue. The network has deployed an emergency software update to address the vulnerability. Actors claiming to be white-hat hackers carried out the withdrawal, which represented about 95% of the wallet's balance. They later returned 3,400 BTC (worth about $270 million) after confirmation that affected nodes had been patched. As of September 7, approximately 598 BTC (worth around $46 million) remains outstanding. The network is currently monitoring its stabilization before fully restoring all functions.

The Liquid Network has resumed block production following a $320 million Bitcoin withdrawal, although transactions and peg operations remain suspended as recovery efforts continue.

In a Thursday post on X, Liquid said block production had resumed “without transactions” as a precaution while the network is monitored to “confirm full stabilization.” Required updates to its functionary and bridge nodes have been deployed, with functionary nodes now signing and validating blocks as intended.

Peg operations, including PAK-authorized peg-outs, remain suspended while the network works to restore its BTC/L-BTC reserve.

A day earlier, Liquid released an emergency update to Elements, the software underlying the network, to address the proof-verification cache vulnerability linked to the incident. The update, Elements v23.3.4, hardened cache keys used for range proofs as part of the network’s recovery plan.

Source: Liquid Network

$270 million in Bitcoin returned after exploit

Liquid paused operations on Sept. 6 after actors claiming to be white-hat hackers withdrew about 4,000 Bitcoin (BTC), worth roughly $320 million, from the network’s federation wallet.

The withdrawal represented about 95% of the wallet’s roughly 4,200 BTC balance and involved L-BTC originating from a bug in Elements, the open-source software underpinning Liquid.

The actors subsequently returned 3,400 BTC, worth about $270 million at the time, after Blockstream confirmed that affected bridge nodes had been patched. About 598 BTC, worth roughly $46 million at current prices, remained outstanding as of Sept. 7.

Magazine: Token buybacks are booming. But are they good for crypto projects?

Related Questions

QWhat major event caused the Liquid Network to pause its operations?

AThe Liquid Network paused its operations after actors claiming to be white-hat hackers withdrew about 4,000 Bitcoin (worth roughly $320 million) from the network's federation wallet.

QHow much Bitcoin was returned by the actors who exploited the network?

AThe actors returned 3,400 BTC, worth about $270 million, after Blockstream confirmed that the affected bridge nodes had been patched.

QWhat specific vulnerability in the Elements software was addressed by the emergency update?

AThe emergency update, Elements v23.3.4, addressed the proof-verification cache vulnerability by hardening cache keys used for range proofs.

QWhich functions of the Liquid Network are still suspended as block production resumes?

AAs block production resumes, transactions and peg operations (including PAK-authorized peg-outs) remain suspended while the network is monitored and works to restore its BTC/L-BTC reserve.

QWhat is the estimated amount of Bitcoin that remains outstanding after the exploit?

AAs of September 7, approximately 598 BTC, worth roughly $46 million at current prices, remained outstanding after the exploit.

Related Reads

Trading

Spot
活动图片