Liquid Network Hack Drains $320 Million in Bitcoin
The latest in a series of intrusions that have undermined trust in the security of digital assets, a blockchain that is utilised by numerous cryptocurrency exchanges to facilitate the transfer of Bitcoin has been hacked for $320 million. Approximately 4,000 of the 4,200 Bitcoin contained in a wallet associated with the Liquid Network were withdrawn, according to a statement from the platform operator on X. It was stated that the perpetrators seem to be “white-hat hackers” who take advantage of security vulnerabilities and generally return the funds, occasionally in return for a fee. “Liquid wallets will be impacted, and we’re sorry for any inconvenience,” Liquid Network wrote, adding it has halted all new transactions. “Federation members are actively working on resolving this so we can restore normal network activity.”
Alex Thorn stated in a post on X late Monday that the hackers had returned 3,400 Bitcoin, apparently retaining approximately $47 million worth for themselves. The hack represents the most recent incident in a series of attacks that have drawn significant attention to the vulnerabilities within cryptocurrency cybersecurity. Just last week, an attacker syphoned off $6 million from a digital-asset lending platform associated with Crypto.com. In August, a breach of the widely used offline Bitcoin wallet Coldcard prompted a reevaluation of the most secure methods for storing the digital asset. “While these events may understandably shake consumer confidence, they highlight where critical infrastructure safeguards need to be strengthened, and why comprehensive security across the full stack is essential for operators,” said Ziqing Ang.
Liquid Network commenced operations in 2018 under the auspices of Blockstream Corp., a blockchain technology firm co-founded by Adam Back, a cryptographer who transitioned into a Bitcoin advocate. According to Blockstream, it is currently overseen by a federation comprising over 80 exchanges, infrastructure firms, and asset managers. In its post on X, Liquid Network stated that the funds were withdrawn through SideSwap, a settlement platform authorised to manage transfers from the network, while confirming that the key remained uncompromised. In the aftermath of Liquid Network’s announcement regarding the hack, communications seemingly exchanged between the hackers and Blockstream were detected embedded within minor Bitcoin transactions, as indicated by data from the blockchain tracker Mempool. The hackers indicated that they would restore the funds upon verification that the vulnerability had been addressed.
Liquid functions as a distinct sidechain, a separate network utilised by exchanges for expedited settlement, as the primary Bitcoin blockchain frequently experiences delays and high transaction costs due to network congestion. Liquid Network accelerates this process by issuing Liquid Bitcoin, or L-BTC, backed by actual Bitcoin that it secures. Blockstream identifies a number of prominent exchanges utilising Liquid, among them BTSE and Bitfinex, the latter of which is affiliated with Tether, the leading issuer of stablecoins globally. BitMEX, which has declared its intention to cease operations this month, was also a participant in the market. Aneirin Flynn stated that preliminary evidence indicates a bug permitting the minting of L-BTC. The breach “is the latest in a spate of attacks exposing weaknesses in crypto infrastructure this year,” Flynn said.
