Press Enter to search · ESC to close

Crypto

Liquid Federation reports ~4,000 BTC minted via bug, reserves fell to 197 BTC

Liquid Federation disclosed that attackers exploited an Elements range-proof validation cache bug to mint ~4,000 unbacked L-BTC, later swapped for real BTC via SideSwap’s authorized exit peg. Before the incident, Liquid held ~4,205 BTC; reserves dropped to 197 BTC before operations paused. A self-described white hat returned 3,400 BTC, leaving ~598.5 BTC unrecovered. No private keys were compromised. Liquid remains offline, with Blockstream preparing Elements v23.3.4 and working to restore the network with 1:1 BTC backing.

Original source

AI take

This incident exposes a critical vulnerability class in sidechain validation logic, distinct from key compromise, and underscores how a single cache flaw can drain a federation's reserves. The partial white-hat return mitigates immediate losses but leaves a significant unrecovered gap, making the network's restoration path and the integrity of its 1:1 backing claim the central issues. The pause in operations and planned software patch highlight systemic risk for federated sidechains, affecting users and operators relying on peg mechanisms. Whether the restored network can regain trust in its auditability and exit processes is the key observation.

Generated by AI for reference only.

Share

Related News

TREE NEWS share card
Long-press image above → Save to Photos / Share
Pitch us Feedback