$320M Exploit Aftermath: Liquid Network Restarts Block Production
Following emergency software patches, Liquid has restarted producing blocks, but transaction capabilities and peg functionalities stay offline during ongoing recovery operations.
Following a Bitcoin withdrawal incident totaling $320 million, the Liquid Network has successfully restarted its block production operations, though transaction processing and peg-related operations continue to be halted as the network undergoes comprehensive recovery procedures.
According to a Thursday announcement shared via X, Liquid confirmed that block production capabilities had been restored "without transactions" as a protective measure while network monitoring takes place to "confirm full stabilization." The necessary software updates for both functionary and bridge nodes have been successfully implemented, with functionary nodes currently performing their intended functions of signing and validating blocks according to protocol.
Regarding peg operations, which include PAK-authorized peg-outs, these functionalities remain offline as the network focuses efforts on rebuilding its BTC/L-BTC reserve holdings.
One day prior to this announcement, Liquid had deployed an emergency software patch for Elements, the foundational software powering the network infrastructure, aimed at resolving the proof-verification cache vulnerability that was connected to the security incident. The software update, designated as Elements v23.3.4, implemented strengthened cache keys utilized for range proofs as an integral component of the network's comprehensive recovery strategy.
$270 million in Bitcoin returned after exploit
Network operations on Liquid were suspended on Sept. 6 following an incident where individuals identifying themselves as white-hat hackers successfully withdrew approximately 4,000 Bitcoin (BTC), valued at around $320 million at the time, from the network's federation wallet infrastructure.
This withdrawal constituted approximately 95% of the wallet's total balance of roughly 4,200 BTC and was connected to L-BTC that originated from a software bug present in Elements, the open-source codebase that serves as Liquid's foundation.
Following Blockstream's verification that the compromised bridge nodes had received the necessary security patches, the individuals subsequently repatriated 3,400 BTC, representing approximately $270 million in value at that moment. As of Sept. 7, around 598 BTC, currently valued at approximately $46 million based on prevailing market prices, remained unreturned.