Liquid Network restores full bitcoin backing after $320 million exploit

2 min read
Liquid Network restores full bitcoin backing after $320 million exploit
PrimeXBT Editorial Team
Reviewed by PrimeXBT

Topics in article

The Liquid Federation says its bitcoin reserves are fully restored, nearly two months after an exploit involving approximately 4,000 BTC. Board member Samson Mow named Blockstream as the source of the replenishing funds, while CoinDesk reports the federation itself did not say where the coins came from.

The Liquid Federation announced Tuesday that the sidechain's bitcoin reserves are back to full 1:1 backing for all LBTC, nearly two months after approximately $320 million in bitcoin was withdrawn from the network.

According to the Liquid Federation on X, reserves are "fully restored, reestablishing 1:1 BTC backing for all LBTC", after a final 250 BTC transfer. Reserve balances are published at liquid.network, where node operators can verify the backing themselves.

Blockstream's deposits close the 600 BTC gap

Samson Mow, a Liquid Federation board member and former Blockstream executive, reported a 50 BTC deposit on Oct. 28, leaving 550 BTC outstanding. Another 300 BTC arrived on Monday, followed by a further 250 BTC later that day. Mow identified Blockstream as the source of the funds.

CoinDesk, however, reports that the federation did not say where the last 600 BTC came from.

How the September exploit unfolded

About 4,000 BTC was taken from Liquid's Federation wallet on Sept. 6. The attacker sent back roughly 3,400 BTC the next day after Blockstream patched the affected bridge nodes, but withheld about 600 BTC. Blockstream later rejected the attacker's demand for a 10% bug bounty in exchange for the remaining coins.

Liquid's incident report traced the exploit to a bug involving cached range proof verifications in Elements, the software that runs the network. The attacker created approximately 4,000 unbacked LBTC and used them to withdraw bitcoin through SideSwap, a Federation member with a peg-out authorization key. Liquid said its network operators were not hacked and no keys were compromised.

Withdrawal limits and governance changes remain

Users have been able to swap BTC and LBTC again for several weeks through participating providers. Direct Federation peg-outs were previously restricted pending additional security checks, and Tuesday's announcement did not say whether the remaining restrictions had been lifted.

The Federation said it is preparing changes to governance and oversight, along with additional technical and operational safeguards. It expects to share further details in the coming weeks.

Sources: The Block, CoinDesk

Trading involves risk.

Most traded markets

XAU / USD
-0.79% 3,915.35
CRUDE
+0.96% 98.232
BTC / USD
-0.57% 77,332.5
EUR / USD
-0.1% 1.11753
USTEC
+0.07% 28,094.18
COIN
+0.87% 137.96
View all markets

Author

PrimeXBT
Our Editorial Team consists of leading experts with a proven record in the fields of trading, cryptocurrencies, blockchain and finance. We thoroughly research the sources of information in order to provide readers with quality content that serves edu...
Read author’s articles
Alert Triangle Risk Disclaimer
Disclaimer: Some past publications may be outdated. We recommend following our news to stay up to date with the latest information. For any questions, feel free to contact our support team via the chat below.
The content provided here is for informational purposes only. It is not intended as personal investment advice and does not constitute a solicitation or invitation to engage in any financial transactions, investments, or related activities. Past performance is not a reliable indicator of future results.
The financial products offered by the Company are complex and come with a high risk of losing money rapidly due to leverage. These products may not be suitable for all investors. Before engaging, you should consider whether you understand how these leveraged products work and whether you can afford the high risk of losing your money.
The Company does not accept clients from the Restricted Jurisdictions as indicated in our website/ T&C. Some services or products may not be available in your jurisdiction.
The applicable legal entity and its respective products and services depend on the client’s country of residence and the entity with which the client has established a contractual relationship during registration.

Today in markets

Browse Crypto News

Register Now

Trading involves risk

Get started in minutes

Our clients love how fast and simple our sign-up is. It takes just a few minutes to get started!

Get Started Get Started
Get started in minutes

Need Help?

Risk Warning:
Trading in leveraged products carries a high level of risk and may not be suitable for all investors.