A major security breach has struck the cryptocurrency sector once more, with the Liquid Network, a Bitcoin-focused blockchain utilized by numerous digital asset exchanges, falling victim to hackers who made off with around $320 million worth of Bitcoin.
This latest incident, part of a worrying trend of cyber thefts in the crypto space, is shaking confidence in the security of digital holdings. The Liquid Network, designed to speed up Bitcoin transactions, confirmed that its Liquid Federation wallet was compromised, leading to the theft of roughly 4,000 BTC. At the time of the attack, this heist was valued at approximately $320 million, leaving the wallet with only about 200 BTC from its original holding of 4,200.
The company took to X to explain that the attacker was a “supposed white hat hacker,” a type of individual who typically finds and exploits a vulnerability to transfer funds but intends to return them, often in exchange for a fee. The stolen assets were withdrawn via SideSwap, an authorized settlement platform responsible for processing transfers on the network. It was noted that SideSwap's own keys were not compromised.
The network acknowledged its affected wallet and apologized for the inconvenience, further stating it had ceased all new transactions. “Federation members are actively working to resolve the issue so we can restore the network’s normal operations,” the announcement added.
This breach is the most recent in a series of strikes that are drawing intense scrutiny to cybersecurity within the crypto industry. Industry data reveals that global losses from crypto theft reached $972 million in the first half of this year, with a record 207 separate attacks, the highest half-year total ever recorded.
The timing of these events raises concerns, as just last week a hacker siphoned off $6 million from a digital asset lending platform connected to Crypto.com. Furthermore, in August, a flaw was exposed in the popular Bitcoin cold wallet Coldcard. This vulnerability involved a defect in its random number generator, which allowed attackers to systematically predict “recovery phrases” for numerous offline wallets. Analysis data suggests that on August 3rd, hackers managed to steal over 1,755 Bitcoin from roughly 5,000 impacted wallets, translating to a value of about $110 million at that time.
The Liquid Network was founded in 2018 by Blockstream Corp., a blockchain technology firm co-founded by Adam Back, a cryptographer who later became a noted Bitcoin advocate. According to Blockstream, the Liquid Network is currently governed by a coalition of more than 80 exchanges, infrastructure providers, and asset management firms. Exchanges rely on Liquid for rapid settlements because the main Bitcoin blockchain often struggles with slow transaction times and high fees during periods of congestion.
To accelerate this process, Liquid Network issues a token called Liquid Bitcoin (L-BTC). This token is backed by real Bitcoin, which remains locked in reserve. Blockstream enumerates several major exchanges using the Liquid Network, including BTSE and Bitfinex, the latter sharing a parent company with Tether, the world’s largest stablecoin issuer. BitMEX is also a user, though it has declared its closure at the end of this month.
Aneirin Flynn, CEO of cybersecurity firm FailSafe, suggested that preliminary evidence points to a vulnerability that authorized the minting of new L-BTC. He characterized the attack as the “latest in a series of incidents this year that have exposed the fragility of crypto infrastructure.” With about 95% of the reserve funds drained and the network suspended, he noted this event highlights a critical weakness in Liquid’s validation mechanisms and asset backing model.
Comments