White-Hat Hackers Withdraw $320M in Bitcoin from Liquid Network

Topics: blockchain · Difficulty: intermediar

Attila Kiraly — Strateg AI & Educator · · 3 min read

Reprezentare conceptuală a securității Bitcoin cu elemente de criptografie și hacking etic.

Originally published: September 7, 2026

A massive sum of approximately $320 million in Bitcoin was withdrawn from the Liquid sidechain by entities claiming to be white-hat hackers. Blockstream, the network developer, is actively communicating with them via cryptographically signed messages to secure the funds.

What happened

The Liquid Network, a prominent Bitcoin sidechain developed by Blockstream, recently experienced a massive withdrawal of approximately $320 million in Bitcoin. The entities behind this movement have identified themselves as "white-hat hackers," claiming they moved the funds to safeguard them from a potential vulnerability.

Following the withdrawal, a unique on-chain dialogue emerged between Blockstream and the hackers. They are communicating using PGP-signed messages embedded within Bitcoin transactions. This method allows both parties to verify each other's identity and intentions in a trustless environment, signaling a collaborative effort to resolve the security issue without loss of funds.

Technology context

This incident revolves around sidechain architecture and cryptographic verification. A sidechain like Liquid is an independent blockchain that is linked to the Bitcoin mainnet. It allows users to move BTC from the main chain to the sidechain (peg-in) to benefit from faster transactions and enhanced privacy features, and move it back (peg-out) when needed.

PGP (Pretty Good Privacy) signing is a cryptographic method used here to ensure the authenticity of the messages. By signing a message with a private key, the hackers can prove they are the ones in control of the moved Bitcoin. This is crucial in high-stakes negotiations where impersonation could lead to further security breaches.

Why it matters

This event is significant because it highlights the inherent risks associated with bridge and sidechain technologies. While these solutions are essential for scaling Bitcoin's utility, they often represent a single point of failure or a more complex attack surface compared to the base layer.

The fact that $320 million was at risk demonstrates that even infrastructure built by industry leaders like Blockstream is not immune to bugs. However, the positive engagement with white-hat hackers showcases a maturing industry where ethical security researchers play a vital role in preventing catastrophic losses.

Key terms explained

Impact

In the short term, the incident has put the Liquid Network under intense scrutiny, raising questions about its current security model. In the medium term, we can expect a push for more decentralized "federation" models in sidechains to prevent any single vulnerability from affecting such a large pool of capital. If the funds are returned successfully, it will reinforce the importance of ethical hacking and transparent communication during crises.

What's next

Looking forward, the industry will likely see an increase in the adoption of formal verification for smart contracts and sidechain protocols. We may also see the development of more standardized on-chain communication protocols for security emergencies. The outcome of this specific case will serve as a blueprint for how large-scale DeFi and sidechain exploits are handled through cryptographic negotiation rather than legal confrontation alone.

Sources

Educational analysis generated with AI and editorially reviewed.

Original source: decrypt.co

Want to learn the fundamentals? What is Bitcoin?

Frequently Asked Questions

Are the funds safe?

The hackers claim to be 'white-hats' who moved the funds for protection and are currently in active dialogue with Blockstream to secure them.

What is the Liquid Network?

Liquid is a Bitcoin sidechain designed for faster and confidential transactions, primarily used by exchanges and institutions.

How is Blockstream communicating with the hackers?

They are using PGP-signed messages embedded in Bitcoin transactions to ensure secure and verified communication.

Was the main Bitcoin blockchain affected?

No, the incident is isolated to the Liquid sidechain; the Bitcoin mainnet remains secure and operational.

What defines a 'White-Hat' hacker?

A white-hat hacker is an ethical security researcher who identifies vulnerabilities to help fix them, rather than exploiting them for personal gain.

Glossary Terms

Continue Learning

Explore more insights about technology, automation, and Web3 in the EduWeb Academy.

Explore Academy