Liquid returns $270M in Bitcoin before network restart
Purported white-hat actors sent 3,400 BTC back to Liquid’s federation wallet after a security incident drained most of its reserves. Blockstream says patched nodes are in place and a restart is being prepared.
Jorge Franganillo / Wikimedia Commons (CC BY 2.0)
Purported white-hat hackers have returned 3,400 Bitcoin to Liquid’s federation wallet, restoring most of the coins removed in a recent security incident. The transfer is valued at about $270 million and represents roughly 85% of the Bitcoin withdrawn from the sidechain’s reserves.
How the incident unfolded
The episode began on Sunday, when attackers pulled about 4,000 BTC from a wallet that held roughly 4,200 BTC. Onchain records show that 3,400 BTC was later sent back to the same federation address. About 598 BTC remains outstanding, and Blockstream is still communicating with the actors involved.
Liquid is a Bitcoin sidechain that issues L-BTC against Bitcoin held by its federation. When the reserves were drained, the amount of Bitcoin backing those tokens fell sharply, leaving the network paused while the situation was assessed. The return of most of the coins restores much of that backing.
What happens next for Liquid
On Monday, JAN3 chief executive and former Blockstream executive Samson Mow said the return came after Blockstream confirmed that the affected bridge nodes had been patched. Blockstream has also said updated software has been deployed and that federation members are preparing for a coordinated restart.
That restart matters because the network depends on the federation mechanism to move between Bitcoin and L-BTC. With the patched software in place and most of the withdrawn coins back in the wallet, Liquid is moving toward resuming operations after the interruption.
The incident highlights the operational risk around sidechain infrastructure, where a compromise at the bridge level can quickly affect reserve holdings and network activity. For Liquid users, the immediate concern is whether the remaining Bitcoin is recovered and whether the restart proceeds without further disruption.
This article is not investment advice and recommends no asset, level or direction; a single session's move is not evidence of a trend. For background see Crypto, Altcoin, Bitcoin, and for terms the finance glossary.
Frequently asked questions
How much Bitcoin was returned?
3,400 BTC was returned to Liquid’s federation wallet.
How much is still missing?
About 598 BTC remains outstanding.
Why does the return matter for Liquid?
Liquid issues L-BTC against Bitcoin held by its federation, so returning most of the withdrawn coins restores much of the backing needed for the network to resume operations.
Sources
Related News
Liquid pauses after $320M bitcoin withdrawal
Liquid Network halted bridge activity after actors claiming to be white-hat hackers moved about 4,000 BTC from a federation wallet and said they would return most of it after a patch.
Bitcoin watches US inflation after weekly close above $80,000
Bitcoin posted its first weekly close above $80,000 since early May as traders turned to US inflation data, the Fed’s September decision and yen intervention as key macro drivers.
Crypto Today: Liquid pauses after $320M BTC withdrawal
Bitcoin sidechain Liquid halted new transactions after about 4,000 BTC left its federation wallet. Orionx is shutting down after a custody shortfall, while Poland’s veto on crypto law held.

Crypto edges higher as all six large caps advance
Bitcoin and ether rose modestly as the large-cap altcoin basket also traded higher, leaving the whole tracked complex in the green. The day’s moves were relatively contained, with ADA leading and XRP lagging.
Bitcoin Enters Bull-Phase as $83K Test Looms
CryptoQuant says Bitcoin’s 24% rebound has turned most of its market gauges bullish, but a weekly close above $83,000 is still needed to confirm the next bull phase.

Bitcoin edges lower as altcoins hold mixed line
Bitcoin and ether slipped slightly on Sunday as two of six tracked tokens rose, leaving large-cap crypto broadly range-bound with only modest day-to-day dispersion.