A major security incident has hit the Liquid Network, a Bitcoin sidechain used for faster and more confidential transactions. Roughly 4,000 bitcoin were withdrawn from a federation wallet in an incident valued at about $320 million at the time of reporting.
What happened?
According to Reuters, Liquid Network reported on Sunday that approximately 4,000 of the roughly 4,200 bitcoin held in its federation wallet were withdrawn. Liquid described the people responsible as purported “white-hat hackers,” although the circumstances and ultimate intent remain under investigation.
The withdrawals were carried out through SideSwap, a settlement platform authorized to facilitate transactions on Liquid. Importantly, Liquid said the cryptographic key used for the transactions was not compromised.
Liquid halted new transactions
As a precaution, Liquid halted new transactions while the incident is investigated. That means users of the network may temporarily be unable to move assets normally while the federation works through what happened and how the funds were withdrawn.
This was not a hack of Bitcoin itself
That distinction matters. Liquid is a Bitcoin layer-2 sidechain, not the Bitcoin base network. Bitcoin can be moved between the main Bitcoin blockchain and Liquid through a one-to-one peg, but Liquid uses its own federation and security model.
Blockstream’s documentation describes Liquid as a sidechain designed for faster settlement, confidential transactions, and the issuance of digital assets. Its federation normally relies on an 11-of-15 multisignature arrangement to authorize peg-out transactions.
Why this incident matters
A loss involving thousands of bitcoin is significant even in the cryptocurrency world. Beyond the dollar value, the incident raises questions about how federated Bitcoin sidechains secure pooled funds, how emergency procedures function, and whether safeguards worked as intended.
The “white-hat” description also makes this unusual. A white-hat hacker generally identifies or exploits a vulnerability with the goal of exposing a security weakness rather than permanently stealing funds. Until the bitcoin are returned or the parties involved explain what happened, however, that description should be treated cautiously.
What comes next?
The immediate questions are whether the bitcoin will be returned, precisely how the withdrawal was authorized, whether Liquid changes its federation security model, and when normal transactions resume.
For ordinary Bitcoin holders, the most important point is that current reporting does not indicate that Bitcoin’s underlying blockchain or cryptography was broken. The incident concerns the infrastructure and custody model surrounding the separate Liquid Network.
Leave a Reply