Liquid Network’s 4,019 BTC ($320M) Drain: What Two Sources Actually Confirm

Sourcing note: The 4,019 BTC (~$320 million) withdrawal from Blockstream’s Liquid Network federation wallet is confirmed by two independent outlets, Bitcoin Magazine and BeInCrypto, plus Blockstream’s own proof-of-reserves page. The claim that attackers left an on-chain message is reported by BeInCrypto alone; Cryptaur treats it as unverified, not false.

The Confirmed Numbers

Blockstream’s Liquid Network, a federated Bitcoin sidechain, paused operations Sunday after roughly 4,019.4 BTC left the reserve wallet backing L-BTC. At Sunday’s price, that is close to $320 million.

Before the transaction, the treasury held over 4,200 BTC. Blockstream’s public proof-of-reserves page now shows a little over 207 BTC. Bridge nodes were disabled and the sidechain itself was halted. The official Liquid Network account said other issued assets on the chain, including USDT, DePix, and various tokenized real-world assets, were unaffected.

How the Multisig Was Moved

The Liquid federation reserve is secured by a multisig of 15 corporate and named members, requiring 11 valid signatures to release funds. Both outlets describe the same mechanism: an apparent inflation bug on the LBTC side of the chain let someone mint over 4,000 LBTC that had never been backed by real bitcoin.

That newly minted LBTC was then redeemed for on-chain BTC through a peg-out transaction using the SideSwap Peg-out Authorization Key. SideSwap is a bridge exchange and one of the 15 federation members. Because the peg-out transaction looked valid under the buggy consensus rules, the federation’s hardware security modules signed off on the withdrawal without flagging it.

Bitcoin Magazine reported the withdrawn funds moved to an address ending in “6gyqjlte.” That detail has not been independently corroborated by a second outlet at time of writing, so treat it as single-sourced.

The Single-Sourced Claims: “White Hat” and an On-Chain Note

BeInCrypto’s reporting frames the actors as attackers who left a message on-chain and states the sidechain’s peg still balances overall, despite the drained reserve. Bitcoin Magazine, by contrast, describes the withdrawal as carried out by “purported white-hat hackers.” Neither framing is confirmed by the other outlet.

These two labels are not necessarily contradictory. A person exploiting a bug can leave a note and still be called various things by different observers. But it means readers should not assume either characterization, benevolent actor or malicious attacker, is settled fact. It is an inference, not an on-chain certainty independently checked by both newsrooms.

What Remains Unverified

Details of the exact inflation bug mechanism have not been confirmed by Blockstream in a formal post-mortem as of this writing. The exact contents of any on-chain message, if one exists, have not been independently reproduced across sources. The destination and current status of the withdrawn 4,019 BTC also rest on a single report.

What is solid: the reserve dropped from over 4,200 BTC to about 207 BTC, the sidechain is paused, bridge nodes are disabled, and other issued assets on Liquid were reported unaffected. Those four facts appear across multiple sources and Blockstream’s own reserve data.

Read more: Liquid Sidechain Balance Falls From 4,200 BTC to 207 BTC After $320M Drain

Sources

• beincrypto.com
• bitcoinmagazine.com