Hackers have withdrawn ~4k BTC (~$320M) from the Liquid Federation wallet
summary
The Liquid Network has experienced a security incident where approximately 4,000 BTC ($320 million) was withdrawn from the Liquid Federation wallet. This breach occurred through the SideSwap PAK, although the team claims the key itself was not compromised. To prevent further loss and resolve the issue, the network has been paused, and exchanges have suspended LBTC deposits and withdrawals.
key points
- Purported white-hat hackers have moved the funds, and the Blockstream team is attempting to contact them via on-chain signed messages.
- Other Liquid assets such as USDT and RWAs remain unaffected, while bridge nodes have been disabled to stop all new transactions on the sidechain.
- Federation members are actively working to restore normal network activity while monitoring the funds via Mempool.
who should read it
Bitcoin users, LBTC holders, and cryptocurrency exchanges that support Liquid Network assets. This information is essential for those tracking the same security incident and managing their assets on the sidechain.
discussion skeptical
consensus
Commenters generally view the 'white hat' claim with skepticism, suspecting the incident was either a deliberate exploit of a cache bug or an inside job. There is a broader debate regarding the centralization of the Liquid Network, with some users clarifying that it is a federated sidechain rather than a decentralized network. The overall mood is cynical, reflecting a common belief that many cryptocurrency projects are inherently fraudulent or prone to failure.
top insight
One commenter points out that the 'self-funding' nature of decentralized digital money allows bug bounties to be researcher-controlled, as the attackers effectively set their own payout by exploiting the vulnerability. This perspective shifts the focus from traditional bug bounty programs to the reality of how security flaws are handled in the wild. It suggests that in the crypto space, the incentive structure for security is fundamentally different from centralized corporate systems.
Generated by an LLM from the article and thread. Check the sources before relying on it.