During the weekend spanning September 6th to 7th, the Bitcoin sidechain known as Liquid Network, launched by Blockstream in 2018, fell victim to a security flaw, leading to the extraction of nearly 4,000 bitcoins—roughly valued at $320 million—out of a total reserve of about 4,200 BTC.

Subsequently, the network halted all trading operations as a consortium of over 80 exchanges, infrastructure providers, and asset management firms moved swiftly to address the situation. The team behind Liquid Network expressed regret via social media, warning that wallet operations would be impacted while coalition members diligently worked toward restoring normal network functionality.

Liquid Network was designed to tackle the issue of sluggish transaction speeds on the Bitcoin blockchain, utilizing L-BTC tokens backed by reserved bitcoins to enable faster settlement times. The near-depletion of its reserves in this incident has sparked doubts regarding the resilience of this operational model.

Unlike many cryptocurrency hacks witnessed this year, this particular attack was not attributed to compromised passwords or exposed private keys. Instead, the pilfered funds were channeled out via the legitimate, permissioned trading platform SideSwap. Blockstream later uncovered that a software vulnerability within its Elements system had generated some of the bitcoins implicated in the breach. In response, SideSwap stated it was unable to distinguish between coins originating from the glitch and genuine ones, opting to treat all coins uniformly. Other assets operating on the same network remained unaffected.

Security analysts have pointed out that the vulnerability resided at the unit level of the Liquid trading software, rather than involving a breach of cryptographic keys or hardware modules. According to the latest updates, the attacker has engaged in on-chain communication with network maintainers, identifying themselves as a "white hat hacker" and pledging to return the funds once the vulnerability is patched. The hacker’s message emphasized the need to "fix the bug first," ensuring every unit receives the necessary update before safely transferring the assets back.

This event unfolds in the wake of other recent security incidents, including an attack on a lending platform associated with Crypto.com that resulted in losses of roughly $6 million the previous week, and a breach of Coldcard hardware wallets in August. As of the time of this report, Liquid Network has not yet announced a timeline for resuming operations or confirmed whether the bitcoins will be returned, with the digital asset trading near $79,770, having fluctuated around the $80,000 mark over the weekend while also facing downward pressure from geopolitical factors such as U.S. actions against Iranian oil tankers.