TLDR
Blockstreams Liquid Network, a Bitcoin sidechain, has paused after roughly 4,000 BTC (around $320 million) were withdrawn from its federation wallet by purported white-hat hackers.
- Liquids bridge reserves dropped by about 95 percent after a peg-out of nearly 4,000 BTC, triggering a full pause of the sidechain.
- LBTC deposits and withdrawals are suspended and some wallets are disrupted, but reports indicate the BTC backing LBTC remains solvent while trust in Liquids security is badly shaken.
- The key unknowns are whether the white hats return funds and how Blockstream hardens Liquids peg-out and governance, which will shape broader attitudes to Bitcoin sidechains.
Deep Dive
1. What Actually Happened
Liquid Network (maintained by Blockstream) disclosed that about 4,000 BTC, worth around $320 million, were withdrawn from its federation wallet, representing roughly 95 percent of its reported reserves, and then moved to a single address that posted an on-chain message claiming we are whitehats. contact us on chain in the transaction data, prompting Liquid to pause network activity and disable bridge nodes so no new transactions can be submitted. Multiple reports note that the withdrawal used the SideSwap Peg-out Authorization Key (PAK), but Liquid stated that the PAK and other keys were not themselves compromised and has not yet fully explained the vulnerability that allowed the withdrawal, while separate coverage attributes the incident to a bug in Blockstreams Elements software that let invalid L-BTC be created and redeemed. Exchanges have been told to suspend deposits and withdrawals of Liquid Bitcoin (LBTC), and Liquid has said that other assets issued on the sidechain such as USDT and tokenized real-world assets are not directly affected, even though wallets and applications that rely on the sidechain are seeing disruptions according to reports from projects like Aqua.
2. Impact On Users And Bitcoin
On-chain accounting and several analyses indicate that under normal Liquid mechanics LBTC is burned when BTC leaves the peg, so this mass peg-out reduced both the federations BTC balance and LBTC supply together, leaving a small BTC surplus and avoiding an obvious insolvency gap for LBTC holders, but the operational halt and unexplained route through an authorized key raise serious questions about security assumptions for users and institutions that treat Liquid as a safer, faster settlement layer. For now, users cannot move LBTC in or out of Liquid, some wallet features that depend on the sidechain are degraded, and confidence in federated Bitcoin sidechains and bridges is under pressure as this joins a broader pattern of large bridge and sidechain incidents in recent years even though Bitcoin on the main chain is not directly compromised.
If you rely on LBTC or Liquid based assets, the main near-term risk is operational lock-in and governance trust rather than immediate peg insolvency, so monitoring restart plans and policy changes matters more than day to day price moves.
3. What To Watch Next
Blockstream and Liquid federation members are attempting to contact the purported white hats using on-chain messages and have asked exchanges to keep LBTC flows paused while they investigate, but there is no confirmed timeline for funds to be returned or for the sidechain to resume normal activity. The most important next signals will be a clear technical postmortem explaining the Elements bug or peg-out path, concrete changes to authorization controls and multisig governance, and any moves toward less trusted bridge designs, which will influence whether institutions remain comfortable running significant BTC reserves on Liquid or other Bitcoin sidechains.
Confidence: high because multiple independent reports and on-chain explorers describe the same withdrawal scale, address behavior and Liquids pause, while motives and remediation plans remain uncertain.
Conclusion
This incident shows that even long running, federated Bitcoin sidechains can suffer large, sudden reserve shocks that force manual intervention, with solvency preserved by protocol mechanics but user operations and trust significantly disrupted. How Blockstream and the Liquid federation handle disclosure, security fixes and negotiations with the purported white hats will not only determine Liquids recovery but also shape how the market views sidechains and bridges as infrastructure for high value Bitcoin flows.
CoinsKid.Com