Bitcoin sidechain Liquid pauses after purported ‘white hats’ withdraw $320M in BTC

Bitcoin sidechain Liquid pauses after purported ‘white hats’ withdraw $320M in BTC img1
Spread the love

Written by Ezra Reguerrastaff writerReviewed by Yohan Yunstaff editor

Written by Ezra Reguerrastaff writer

Reviewed by Yohan Yunstaff editor

Bitcoin sidechain Liquid pauses after purported ‘white hats’ withdraw $320M in BTC

Latest NewsPublishedSep 7, 2026

The actors told Blockstream they would return most of the 4,000 BTC after the Elements vulnerability is patched across the network.

Bitcoin sidechain Liquid paused operations after actors claiming to be white-hat hackers withdrew about 4,000 Bitcoin worth $320 million from its federation wallet. 

On Sunday, Liquid stated that bridge nodes were disabled, preventing new transactions, while exchanges had halted or were preparing to halt L-BTC deposits and withdrawals.

Blockstream, Liquid’s technology provider, started contacting the actors through signed onchain messages. Subsequent messages demonstrate the actors told Blockstream to patch the vulnerability and ensure every node was updated before they would return most of the Bitcoin. 

They also sent encrypted technical details to Blockstream, as reported by Galaxy Digital research head Alex Thorn. At the time of writing, the funds had not been returned. 

SideSwap stated the withdrawal passed through its peg-out service as a customer order using its Peg-out Authorization Key (PAK), but that the key was not compromised. It stated the L-BTC used in the transaction originated from a bug in Elements, the open-source software underpinning Liquid, rather than SideSwap’s systems. 

Cointelegraph reached out to Liquid Network and Blockstream for comment.

The withdrawn Bitcoin represented roughly 95% of the wallet’s approximately 4,200 BTC balance before the incident. Liquid stated other assets issued on the network, including USDT, DePix and real-world assets, were unaffected. The sidechain remained paused while federation members worked to fix the vulnerability. 

This is a developing story, and further information will be added as it becomes available. 

Related: ‘White hats’ take 4000 BTC from Liquid, ETFs see best inflows of 2026: Hodler’s Digest

1 minute letter

1 minute letter

Subscribe to daily byte-sized crypto news from Cointelegraph

Subscribe

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

  • Hackers
  • Hacks
  • Cybersecurity
  • Bitcoin

More on the subject

‘White hats’ take 4000 BTC from Liquid, ETFs see best inflows of 2026: Hodler’s Digest



5 hours ago

Andrew Fenton

Satoshi-era Bitcoin wakes after 16 years of dormancy as 600 BTC moves



16 hours ago

Helen Partz

Bitcoin ETF inflows hit $731M, highest since January as BTC reclaims $80K



Sep 4, 2026

Helen Partz

‘White hats’ take 4000 BTC from Liquid, ETFs see best inflows of 2026: Hodler’s Digest



5 hours ago

Andrew Fenton

Satoshi-era Bitcoin wakes after 16 years of dormancy as 600 BTC moves



16 hours ago

Helen Partz

Bitcoin ETF inflows hit $731M, highest since January as BTC reclaims $80K



Sep 4, 2026

Helen Partz


💡 A Greener Way to Earn: Looking for a smarter, more sustainable way to earn and mining crypto? EcoPool Network is a cloud-based mining pool that does the heavy lifting on remote servers — so you earn rewards around the clock without worrying about overheating hardware or sky-high electricity bills. It’s lightweight, battery-friendly, and built for everyday users. Download EcoPool now and start mining & earning smarter today.

Spread the love

About the Author

Leave a Reply

Your email address will not be published. Required fields are marked *

You may also like these