Bitcoin News

Story: Liquid Network Struggles as $320M Exploit Leaves 598 BTC Still Missing

By Jean-Luc Maracon

1 / 15

How the Exploit Actually Worked. The flaw lived inside Elements, the open-source software that powers Liquid.

2 / 15

Negotiations Over Bitcoin Transaction Messages. Here's the part that's genuinely strange. Blockstream and the actors didn't communicate through…

3 / 15

What's Still Broken and What Comes Next. Liquid is keeping transactions disabled for now. The logic is straightforward — restarting blocks…

4 / 15

Liquid Network is back producing blocks. Sort of. Transactions are still off, peg operations are frozen, and nearly 600 Bitcoin hasn't come back yet.

5 / 15

The network confirmed its functionary nodes restarted block production after a staggering incident that saw roughly 3,996 BTC — about 95% of everything sitting in the federation…

6 / 15

The peg operations — the mechanism users rely on to swap L-BTC back for real Bitcoin — remain suspended while the network works to rebuild its reserve.

7 / 15

The flaw lived inside Elements, the open-source software that powers Liquid. Someone found a way to game the range proof validation system.

8 / 15

Once the unbacked L-BTC existed, the actor pushed a peg-out through SideSwap. SideSwap's process treated the request as legitimate. Real Bitcoin left the federation wallet.

9 / 15

Liquid's emergency fix came as Elements v23.3.4. The update changed how cache keys work during range proof validation, closing the hole that made reuse possible.

10 / 15

The federation structure itself — 15 rotating functionaries, 11 signatures required to move any funds — didn't fail in the way you might expect. No signing key was stolen.

11 / 15

Read also: Bitcoin Hits $79K as Golden Cross Sparks $100K Target with Fed Decision Looming

12 / 15

The remaining 598.5 BTC — worth around $46 million — hasn't moved back. There's no public agreement covering it. Liquid hasn't called it a bounty.

13 / 15

Ledger's CTO Charles Guillemet didn't mince words on the white-hat framing. He said the situation looks more like extortion than ethical security research.

14 / 15

Liquid is keeping transactions disabled for now. The logic is straightforward — restarting blocks without enabling transactions lets developers watch the system under real…

15 / 15

Related: Bitcoin Plummets Below $77,000 as Treasury Yields Surge to 5.353%

The Currency Analytics

Want the full story?