Blockstream Tells Liquid Network Hacker It Is Safe to Return Stolen Funds

Stabilizing the Protocol After Massive Breach

The Bitcoin sidechain Liquid Network remains suspended following a massive security breach that drained approximately $320 million in assets. Blockstream, the company behind the protocol, recently addressed the unidentified attacker directly. The team confirmed that the network’s state has been stabilized sufficiently to allow for the safe return of stolen funds. This development marks a critical step in the ongoing effort to restore normal operations across the ecosystem.

Blockstream emphasized that the underlying infrastructure is now secure against further exploitation during the recovery phase. The pause was implemented immediately after the exploit was detected to prevent additional losses. By signaling safety to the hacker, the developers aim to encourage the return of the bulk of the missing capital without triggering a panic sell-off among other users. The communication serves as a formal invitation for the attacker to cooperate with the restoration process.

The security incident forced a temporary halt to all transactions on the Liquid Network. This sidechain is widely used for institutional trading and asset issuance, making its downtime significant for market participants. Blockstream engineers worked rapidly to patch the vulnerability that allowed the unauthorized access. They verified that the consensus mechanism remained intact despite the large-scale theft. The decision to pause the chain was a precautionary measure to isolate the compromised components.

Will the Attacker Cooperate With Recovery Efforts?

Technical teams have since completed an audit of the affected nodes. They confirmed that the integrity of the remaining user balances is preserved. The network can now accept returned funds without risking further data corruption or loss. This technical validation provides the confidence needed for the hacker to move the assets back into the system. The process involves standard cryptographic verification to ensure the funds are legitimate and correctly attributed.

The primary question hanging over the community is whether the hacker will honor the implicit agreement. Returning funds requires the attacker to interact with the network again, which could potentially reveal their identity or location. However, staying silent risks the funds being locked away indefinitely if the network resumes without them. Blockstream’s message reduces the risk for the attacker by guaranteeing a clean environment for the transaction. Many analysts believe this diplomatic approach increases the likelihood of a full recovery.

The lack of public statements from other major players in the network has left some uncertainty. Most stakeholders have waited for Blockstream to lead the communication efforts. This silence from others suggests a coordinated strategy to avoid conflicting messages. The focus remains strictly on getting the money back before the chain restarts.

Frequently Asked Questions

How much money was stolen from the Liquid Network? Approximately $320 million in assets were drained during the security breach. This sum represents a significant portion of the total value held on the sidechain at the time of the incident.

Why did Blockstream tell the hacker it is safe to return funds? The team confirmed that the network’s state is stable and secure. This assurance allows the attacker to send the stolen assets back without fear of triggering another exploit or losing the funds in the process.

Is the Liquid Network currently operational? No, the network remains paused while the recovery process unfolds. Operations will likely resume only after the majority of the stolen funds have been returned and verified by the core team.