The Bitcoin sidechain halted operations after roughly 4,000 BTC left its federation reserves under disputed circumstances.
Blockstream's Liquid Network went into a paused state on September 6 after a large volume of bitcoin left its federation reserves. The Block and Bitcoin Magazine both reported the withdrawal totaled approximately 4,000 BTC, valued at around $320 million at the time.
Liquid Network operates as a federated sidechain built on top of Bitcoin. It allows faster settlement and confidential transactions for exchanges, institutions, and traders. Bitcoin moved onto Liquid is represented as L-BTC, a token backed one-to-one by BTC held in reserve by a federation of network members.
That federation reserve is the backbone of Liquid's trust model. Unlike Bitcoin's base layer, which relies on decentralized mining and full-node validation, Liquid depends on a defined group of functionaries to manage peg-ins and peg-outs and to safeguard the underlying bitcoin. A large, unexplained withdrawal from that reserve strikes at the core of that trust arrangement.
Reports describe the parties behind the withdrawal as purported white-hat hackers. In cybersecurity parlance, a white-hat actor typically identifies a vulnerability and either discloses it responsibly or moves funds to prevent a worse outcome, often returning them afterward. The white-hat label in this case has not been independently confirmed, and neither The Block nor Bitcoin Magazine established the true motive or identity of those responsible.
Blockstream paused Liquid Network activity following the withdrawal, a step that typically halts further peg-ins, peg-outs, or federation-level transactions while an incident is assessed. Pausing a live blockchain network, even one with a permissioned federation, is an unusual and consequential decision. It signals that operators viewed the situation as serious enough to warrant an immediate operational stop rather than a quieter internal review.
The scale of the withdrawal, at roughly $320 million, places this among the larger reserve-related incidents to hit a Bitcoin-adjacent infrastructure project. Liquid has been positioned by Blockstream as a settlement layer for institutional bitcoin activity, including confidential asset issuance and faster interbank-style settlement. An incident touching its reserves raises questions for the institutions and exchanges that rely on the network for liquidity and settlement speed.
As of the reporting window, neither outlet detailed whether the withdrawn bitcoin had been returned, whether Blockstream identified those responsible, or what specific vulnerability, if any, was exploited. The situation remains fluid, and the full circumstances behind the withdrawal had not been fully disclosed publicly at the time of these reports.
Market Impact
A pause on Liquid Network could disrupt users and institutions that depend on the sidechain for settlement, confidential asset transfers, or L-BTC liquidity. Exchanges and trading desks that route bitcoin through Liquid may need to temporarily adjust operations while the network status is unresolved.
More broadly, the incident is likely to renew scrutiny of federated sidechain security models within the Bitcoin ecosystem. Sidechains trade some of Bitcoin's base-layer decentralization for speed and privacy features, relying instead on a defined federation to hold reserves. A reserve-level incident, regardless of the actors' intent, may prompt institutional users to reassess counterparty and custody risk before Liquid Network fully resumes normal operations.
Blockstream has not publicly detailed the full resolution of the incident, and key questions about the withdrawal's motive and outcome remain open. Further updates from Blockstream and continued reporting are expected to clarify what happened to Liquid Network's reserves.
Frequently Asked Questions
What is Liquid Network?
Liquid Network is a Bitcoin sidechain operated by Blockstream that enables faster, more private transactions using a token called L-BTC, backed by bitcoin held in federation reserves.
How much bitcoin was withdrawn from Liquid Network's reserves?
Reports from The Block and Bitcoin Magazine put the withdrawal at approximately 4,000 BTC, valued at roughly $320 million at the time.
Were the hackers confirmed to be acting in good faith?
The withdrawal has been described as the work of purported white-hat hackers, but neither the identity nor the true motive of those involved has been independently confirmed.
Why did Blockstream pause the network?
Blockstream paused Liquid Network as a precautionary measure following the large reserve withdrawal, halting further activity while the incident is assessed.
