Skip to main content
See every side of every news story
Published loading...Updated

Liquid Network Drained of $320M in Cache Bug Exploit

Liquid said the network is halted while Blockstream contacts the actors, who claim they will return the funds after a patch is applied.

  • On Sunday, September 6, 2026, the Liquid Network halted transactions after an unknown actor drained roughly $320 million in Bitcoin through an exploit of the settlement layer used by major exchanges.
  • An unpatched range-proof cache bug in the Elements codebase allowed the attacker to mint unbacked L-BTC tokens, as federation nodes running outdated software failed to validate the invalid transactions.
  • The attacker claimed to be a 'white-hat' researcher via on-chain OP_RETURN messages and returned 3,400 BTC to the federation on September 7, leaving 598.5 BTC—worth about $47 million—in their controlled address.
  • Blockstream patched bridge nodes, but the network remains frozen as of Wednesday, September 9, 2026, exposing vulnerabilities in a system dependent on 15 functionaries keeping software current.
  • Recovering 85% of stolen funds within 30 hours is considered favorable by some, yet critics argue the reliance on attacker goodwill rather than protocol safeguards reveals systemic risks in federated sidechains.
Insights by Ground AI
Podcasts & Opinions

13 Articles

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 34% of the sources lean Left, 33% of the sources are Center, 33% of the sources lean Right
34% Left

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

IBTimes UK broke the news in United Kingdom on Monday, September 7, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal