Liquid Network attacker returns 3,400 BTC after bug fix, retains 598.5 BTC

The partial return after a coordinated patch suggests the attacker's leverage was tied to the exploit's viability, not purely to ransom dynamics. With the vulnerability closed, the remaining 598.5 BTC may become harder to convert or launder, as network operators and exchanges likely heightened scrutiny. This case highlights how technical fixes can shift negotiation power in thefts, and whether the attacker attempts further returns or dumps the remainder is the open question for the ecosystem's security posture.