The recent hack of the Bitcoin-linked Liquid network, which resulted in losses of up to $320 million, has once again tarnished the reputation of cryptocurrencies. This comes at a time when the industry is striving to convince banks and institutional investors that digital assets can be integrated into mainstream financial infrastructure.

However, the damage extends far beyond the stolen Bitcoin itself. Liquid was designed to enhance the utility of the largest cryptocurrency in trading and settlement, yet this incident has precisely exposed the vulnerabilities in the periphery of the blockchain: wallets, custody arrangements, and trading infrastructure. These are ultimately components that users are forced to rely on.

Nikhil Raghuveera, CEO of blockchain compliance infrastructure provider Predicate, stated: "The ongoing stream of attacks sends a clear signal to global fintech companies and institutions: decentralized finance is not yet ready for the mainstream stage. While blockchain excels at financial settlement, DeFi falls far short of the institutional-grade standards taken for granted in traditional markets."

Decentralization becomes a weakness

The relentless wave of hacks is exposing decentralization—once touted as the greatest advantage of cryptocurrencies—as a fragile link. Due to the absence of a central authority capable of reversing erroneous operations, protecting assets, and absorbing losses, the entire system forces users to depend on fragmented infrastructure, allowing malicious actors to continuously discover new vulnerabilities.

Although the total value stolen has declined, the frequency of attacks is rising. According to DefiLlama data, 250 attacks have occurred so far in 2026, with approximately $1.4 billion stolen, compared to 146 attacks and roughly $2.7 billion in losses in 2025. This year, attacks on cross-chain bridges and cross-chain infrastructure have reached 26, accounting for more than 10% of all incidents. These tools are used to help users transfer tokens or information between different blockchains. In 2025, DefiLlama recorded only three such events.

Cross-chain bridges are critical components of DeFi, enabling automated transfers and exchanges of various digital assets. However, the proliferation of numerous cross-chain projects, coupled with limited cybersecurity review capabilities, increases the associated risks.

The emergence of "white hat" hackers

This week's Liquid network attack marks the latest major security incident against decentralized platforms this year, following attacks on Kelp DAO and Drift Protocol. The first two attacks combined resulted in losses of $588 million. Liquid stated that approximately 4,000 Bitcoins from its main wallet—representing about 95% of its total holdings—were stolen by so-called "white hat" hackers. These types of hackers exploit security vulnerabilities and typically return funds after receiving a fee.

According to Alex Thorn, head of research at cryptocurrency firm Galaxy Digital (GLXY.US), the hacker returned 3,400 Bitcoins while retaining approximately $47 million worth of assets. Liquid stated that the authorized keys for the settlement platform used in this attack were not compromised. This serves as another reminder that even when the underlying blockchain operates normally, the supporting systems built around it can still fail.

Just last week, an attacker stole $6 million from a digital asset lending platform associated with Crypto.com, and in August, an attack on the popular offline Bitcoin wallet Coldcard raised questions about "the safest method of digital asset storage." Even with highly secure underlying networks, investors can still be exposed to risk through applications and intermediaries built on top of them.

Ziqing Ang, head of Asia-Pacific policy at TRM Labs, noted: "These incidents demonstrate that vulnerabilities exist at the operational and infrastructure levels, rather than in the underlying consensus mechanisms themselves." This poses a particularly prominent challenge for traditional financial institutions that are rapidly entering the cryptocurrency space. For example, a bank considering issuing tokenized deposits or securities must not only evaluate the security of the blockchain itself, but also verify the reliability of custody systems, smart contracts, settlement mechanisms, and the entities responsible for asset control.

Raghuveera added: "A vulnerability in one component of the infrastructure can impact multiple businesses that depend on it. An exchange using a compromised bridge tool, a wallet holding affected tokens, or a market maker providing liquidity could all be instantly exposed to risk, even if their own systems were never breached."

Aneirin Flynn, CEO of cybersecurity technology firm FailSafe, believes that although most of the Bitcoin stolen in the Liquid hack has been returned, this "does not change the nature of the risk." Flynn pointed out: "This attack could easily have been carried out by a malicious group with no intention of returning the funds. The fact that millions of dollars were effortlessly extracted due to code vulnerabilities demonstrates that software flaws represent a persistent and enduring risk to cryptocurrency infrastructure."

The inherent contradiction

This is the paradox facing cryptocurrency as it matures: the industry was born from a desire to reduce reliance on trusted financial intermediaries, yet its institutionalized future increasingly depends on trust in the peripheral infrastructure of blockchain. The cost of eroding confidence may manifest as higher security standards, greater demands for insurance and capital buffers, further diversification of custody and settlement networks—or simply a slowdown in institutional adoption.

For years, the cryptocurrency industry has argued that blockchain can provide more efficient financial rails. The Liquid hack serves as yet another reminder: the credibility of these rails ultimately depends on the solidity of the infrastructure carrying assets above them.