Press Enter to search · ESC to close

Crypto DeFi

Liquid Network loses 3,996 BTC after range-proof cache flaw; 3,400 returned

Roughly 4,000 BTC — about $320 million at the time — left the Liquid Network federation wallet on Sept. 6 after an attacker exploited a range-proof cache flaw in the Elements node software, minting 3,996 unsupported L-BTC. Eleven of 15 federation signers approved the peg-out, which was processed via SideSwap. The attacker returned 3,400 BTC on Sept. 7 and kept 598.5 BTC; Blockstream publicly refused to pay a ransom for the rest.

Original source

AI take

The material fact here is not the loss but the mechanism: a consensus-level cache bug in Elements let unsupported L-BTC pass verification, and the federation's signer threshold did not catch it before peg-out. That reframes the risk conversation around sidechain and federated-bridge designs, where security depends on both node software correctness and signer diligence rather than Bitcoin's base-layer guarantees. A partial voluntary return leaves the remaining shortfall unresolved, and whether the federation's reserves are made whole — or the loss is socialized — is the open question.

Generated by AI for reference only.

Share

Related News

TREE NEWS share card
Long-press image above → Save to Photos / Share
Pitch us Feedback