Liquid Network Exploit Drains $320M in BTC, 85% Returned
Lawrence Jengar Sep 09, 2026 22:23 Hackers exploited a Liquid Network bug to steal $320M in BTC, returning 85%. The incident reveals risks in blockchain-based financial layers. A critical software vulnerability in Liquid Network allowed hackers to siphon off nearly 4,000 BTC, worth $320 million at the time, before returning 85% of the stolen funds. The exploit, which occurred on September 6, targeted flaws in the Bitcoin sidechains transaction validation mechanisms, underscoring risks in blockchain-based financial infrastructure. The attack hinged on Liquid‘s Confidential Transactions system, which uses cryptographic proofs to validate transfers while keeping transaction amounts hidden. A flaw in the caching mechanism for these proofs enabled the attackers to create unbacked L-BTC tokens, which they then swapped for actual BTC from Liquid’s reserve. Approximately 3,998 BTC—95% of Liquids federation wallet—was drained before the network was paused. Liquid Network, developed by Blockstream, is intended to provide fast, low-cost, and private Bitcoin transactions using L-BTC, a token pegged 1:1 to BTC. Under normal conditions, users must deposit BTC into Liquids network to mint L-BTC. However, the exploit bypassed this requirement, allowing hackers to mint tokens without collateral and “withdraw” real BTC. After the breach, the attackers, claiming to be white-hat hackers, communicated with Blockstream via Bitcoin‘s OP_RETURN









