Hackers Return $263 Million Stolen From Liquid Network
Hackers returned $263M of $320M stolen from Liquid Network, demanding a bug fix.
Alleged 'white-hat' hackers stole approximately $320 million in Bitcoin from the Liquid Network's federation wallet. They have since returned 3,400 Bitcoin, valued at around $262.6 million, with the remaining ~598 Bitcoin outstanding. The hackers claim they will return the rest once Liquid resolves the vulnerability that enabled the heist.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Blockstream?
Get an email when a new story names Blockstream, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers exploited an unpatched vulnerability in Liquid Network's federation wallet, a multi-signature custodial system designed to secure large volumes of Bitcoin — underscoring that even purpose-built security architectures can harbor critical flaws. The partial return of funds by self-described 'white-hat' hackers does not diminish the severity of the incident; organizations should never rely on an attacker's goodwill to recover assets. The fact that the hackers are conditioning the return of remaining funds on Liquid resolving the vulnerability highlights a dangerous dynamic where attackers dictate security remediation timelines. This case illustrates that high-value cryptocurrency custodial systems require continuous, proactive vulnerability assessments rather than reactive patching after a breach.
What helps against this
How we list vendors- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — SideSwap PAK