Liquid Network Recovers 3,400 BTC From White Hat Hackers, Talks Continue for Rest

On-chain negotiations returned most of the funds while the white hats retained 598.5 BTC, with discussions ongoing over remaining amounts.

Liquid Network, the Bitcoin sidechain operated by Blockstream, has recovered 3,400 BTC following negotiations conducted directly on the blockchain. The recovery came after a group identified as white hat hackers accessed funds and then engaged with the network's operators through on-chain messaging.

As part of the resolution, the white hats retained 598.5 BTC. This amount appears to function as a form of bounty or negotiated settlement, a pattern seen in other blockchain security incidents where ethical hackers return the bulk of intercepted funds in exchange for keeping a portion.

Reports indicate that talks are continuing regarding any remaining funds tied to the incident. The exact scope of what remains outstanding has not been fully detailed, and the situation appears to still be evolving as of this reporting.

On-chain negotiation has become a recognizable method for resolving disputes between protocols and the individuals who exploit vulnerabilities in them. Rather than relying solely on legal action or law enforcement, some projects choose to communicate transparently through blockchain transactions and public messages. This approach allows both sides to verify commitments in real time, since blockchain transactions are immutable and publicly visible once confirmed.

Liquid Network functions as a federated sidechain built to extend Bitcoin's base layer with faster settlement and confidential transactions, primarily serving exchanges, institutions, and traders who need quicker asset transfers. Because it operates as critical infrastructure for parts of the Bitcoin ecosystem, any security incident involving its funds draws close attention from the broader crypto industry.

The classification of the actors involved as white hat hackers suggests the funds were accessed through a vulnerability rather than external theft in the traditional sense, though the exact nature of the exploit has not been detailed in the reporting available. White hat arrangements typically involve the hacker demonstrating the flaw, then negotiating a return of funds, often retaining a percentage as an informal bug bounty.

The recovery of 3,400 BTC represents a significant sum by any measure, underscoring both the scale of exposure Liquid Network faced and the effectiveness of direct on-chain dialogue in resolving the matter. Further updates are expected as negotiations over any remaining balance continue.

Market Impact

The recovery of a large majority of the affected bitcoin is likely to be viewed as a reassuring signal for users and institutions relying on Liquid Network's infrastructure. Security incidents involving sidechains and Layer 2 systems tend to draw scrutiny over custody practices and the resilience of federated or multisig arrangements used to secure funds.

Because talks are still ongoing for any remaining funds, the full financial impact of the incident is not yet finalized. Market participants and exchange partners that rely on Liquid Network for settlement may watch for further disclosures about the vulnerability itself and any operational changes made in response.

The bulk of the affected bitcoin has been returned to Liquid Network through direct on-chain negotiation, though the resolution of any remaining funds is still in progress. Further details are likely to emerge as talks continue.

Frequently Asked Questions

What is Liquid Network?

Liquid Network is a Bitcoin sidechain operated by Blockstream, designed to offer faster settlement and confidential transactions for exchanges and institutional users.

How much bitcoin was recovered and how much did the hackers keep?

Liquid Network recovered 3,400 BTC, while the white hat hackers involved retained 598.5 BTC as part of the negotiated resolution.

What does 'white hat hacker' mean in this context?

It refers to individuals who exploit a security vulnerability but act in good faith, typically returning most or all funds in exchange for keeping a portion as a bounty rather than causing lasting harm.

Is the situation fully resolved?

Not entirely. Reports indicate that negotiations are still underway regarding any funds beyond the 3,400 BTC already returned.