Liquid Network, a Bitcoin sidechain widely used by cryptocurrency exchanges for faster settlement, has halted all new transactions following a security exploit that drained approximately $320 million worth of bitcoin. Purported white-hat hackers withdrew roughly 4,000 of the 4,200 bitcoin held in the network's federation wallet, triggering an immediate suspension of services while federation members work to resolve the issue. The incident underscores growing vulnerabilities in layer-2 solutions designed to alleviate Bitcoin's mainnet congestion.

Market Context

The halt in Liquid Network operations comes amid a string of security breaches that have plagued the crypto market this year. Recent incidents include a $6 million drain from a lending platform linked to Crypto.com last week and an August breach involving the Coldcard hardware wallet. Liquid Network, launched in 2018 by Blockstream, was designed to solve the slow speed of the Bitcoin blockchain by issuing L-BTC against bitcoin locked in reserve. The drain of nearly the entire reserve raises significant doubts about the security of this settlement model, which is overseen by a federation of more than 80 exchanges, infrastructure firms, and asset managers.

Analysis

Blockstream attributed the incident to a software bug in its Elements system rather than compromised private keys or hardware modules, which are typical vectors for most crypto hacks. Security specialists indicate the flaw occurred at the node level in Liquid’s transaction software. The stolen funds moved out through SideSwap, a normal and approved trading platform, rather than via a direct key breach. SideSwap stated it could not distinguish which coins originated from the bug and which were legitimate, leading it to treat all affected assets identically. Other types of assets on the Liquid network were reportedly not affected. White-hat hackers typically exploit flaws before malicious actors, moving funds and seeking a fee to return them, but the status of the bitcoin return remains uncertain.

Key Numbers

- Approximately $320 million in bitcoin was withdrawn from the federation wallet.

- 4,000 out of 4,200 bitcoin held in the wallet were removed by the purported hackers.

- Liquid Network is overseen by a federation of more than 80 entities, including exchanges and asset managers.

- The incident follows a $6 million exploit on a Crypto.com-linked platform last week.

- Blockstream identified the root cause as a software bug in the Elements system, not a key compromise.

What to Watch

Market participants are monitoring for updates on when Liquid Network will reopen and whether the withdrawn bitcoin will be returned by the white-hat hackers. The resolution of this event may influence institutional confidence in layer-2 Bitcoin solutions and drive further scrutiny of federation-based security models. Investors should also watch for potential volatility in exchange stocks or crypto assets relying heavily on Liquid for settlement operations.