Major Exploit on Liquid Network Results in $320 Million Loss

A significant security breach on the Liquid Network, a Bitcoin sidechain developed by Blockstream, has resulted in the minting of approximately 3,998.5 L-BTC, valued at around $320 million. The exploit, which occurred on September 6, was detailed in an analysis by cybersecurity firm SlowMist, revealing that a software bug allowed an attacker to drain 95% of the Liquid Federation's reserves in just a few hours.

The root cause of the incident was identified as a cache key collision vulnerability within Blockstream's Elements software. This flaw enabled the attacker to bypass verification processes, minting L-BTC without any corresponding Bitcoin backing. Following the exploit, the Liquid Federation's reserve wallet plummeted from over 4,200 BTC to about 197 BTC before recovery efforts began.

In response to the breach, Blockstream suspended peg operations and paused block production for four days while deploying a patch to address the vulnerability. Approximately 3,400 BTC were returned to the federation's peg wallet, while the attacker retained around 598.5 BTC as a self-assessed bounty. The incident highlights the risks associated with performance optimizations in software development, particularly in cryptographic systems.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News