TREE NEWS update: Liquid Federation disclosed that attackers exploited an Elements range-proof validation cache bug to mint ~4,000 unbacked L-BTC, later swapped for real BTC via SideSwap’s authorized exit peg. Before the incident, Liquid held ~4,205 BTC; reserves dropped to 197 BTC before operations paused. A self-described white hat returned 3,400 BTC, leaving ~598.5 BTC unrecovered. No private keys were compromised. Liquid remains offline, with Blockstream preparing Elements v23.3.4 and working to restore the network with 1:1 BTC backing.
Liquid Federation reports ~4,000 BTC minted via bug, reserves fell to 197 BTC
This incident exposes a critical vulnerability class in sidechain validation logic, distinct from key compromise, and underscores how a single cache flaw can drain a federation's reserves. The partial white-hat return mitigates immediate losses but leaves a significant unrecovered gap, making the network's restoration path and the integrity of its 1:1 backing claim the central issues. The pause in operations and planned software patch highlight systemic risk for federated sidechains, affecting users and operators relying on peg mechanisms. Whether the restored network can regain trust in its auditability and exit processes is the key observation.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.