White‑Hat Hackers Drain $320 Million From Liquid Network

How the Heist Was Executed

Over the weekend, a team claiming to be ethical hackers exploited the Liquid Network, a Bitcoin sidechain, to withdraw about 320 million dollars worth of real bitcoin. The theft occurred between Friday and Saturday, when the attackers siphoned roughly 4,000 of the 4,200 BTC stored on the network.

The Liquid Network is designed to offer fast, confidential transactions for institutional users. It relies on a set of validators to maintain security, but the recent breach exposed weaknesses in its permission system. The attackers used a combination of software flaws and social engineering to gain control over the network’s liquidity pools, allowing them to move funds without detection.

According to statements from the group, they first identified a vulnerability in the network’s smart‑contract logic that permitted unauthorized creation of new asset issuances.

What Does This Mean for the Bitcoin Ecosystem?

By exploiting this flaw, they generated counterfeit Liquid BTC tokens and then swapped them for real BTC on the underlying Bitcoin blockchain. The process was automated and completed in under an hour.

Investigators noted that the attackers leveraged compromised validator nodes to approve the fraudulent transactions. The nodes were compromised through phishing emails that tricked operators into revealing private keys. Once the attackers had access, they could sign off on the illicit transfers, bypassing the network’s consensus rules.

Frequently Asked Questions

The incident has raised serious concerns about the security of sidechains that rely on third‑party validators. Many users of Liquid Network have expressed alarm, and several exchanges that support the sidechain have temporarily halted deposits and withdrawals.

The incident also highlights the need for stronger audit procedures and better user education on phishing threats.

Q: Were any Bitcoin holders directly affected? A: Yes, the 4,000 BTC that were withdrawn belonged to various institutional investors who had stored their assets on Liquid. Those investors are now seeking compensation from the network operators.