Liquid Network Resumes Operations After $320M Bitcoin Exploit
Block production restarts but transactions remain frozen during recovery.
1Emergency Network Restart
Liquid Network has cautiously resumed block production after suspending operations due to a $320M Bitcoin exploit. As a security measure, blocks are currently being generated without processing any transactions. This phased approach allows operators to monitor system stability before fully restoring functionality. The network's functionary and bridge nodes have all received critical updates to address the vulnerability.
2Peg System Remains Frozen
All transactions involving Liquid's peg system, which connects to the Bitcoin mainchain, remain suspended. This includes both peg-ins (deposits to Liquid) and peg-outs (withdrawals to Bitcoin). The PAK-authorized transfer mechanism is disabled while the team prioritizes recovery of the BTC/LBTC reserve. Users cannot currently move assets between the networks, though monitoring continues.
3Exploit Scale Revealed
Approximately 4,000 BTC (worth $320M) were extracted from Liquid's federation wallet during the incident. While exact recovery figures aren't yet updated, this represents most of the wallet's assets. The attack prompted immediate emergency fixes before partial network restart. Security teams focused on patching the exploit vector to prevent recurring breaches during restoration phases.
4Security Infrastructure Upgrades
Blockstream has deployed comprehensive updates across Liquid's node infrastructure. Functionary nodes now actively sign and validate blocks as part of enhanced security protocols. These measures aim to stabilize the network before transaction processing resumes. The team emphasizes these are precautionary steps, not indicators of full operational recovery.
5Recovery Scam Warnings
Liquid Network issued alerts about fraudulent recovery schemes targeting users. Scammers are exploiting the situation with fake updates and restoration services through unofficial channels. The network strictly advises against sharing private keys or seed phrases, especially regarding peg operations. Only official Liquid and Blockstream communications should be trusted for updates.
6Community Assistance
Bitcoin security researchers and community members are collaborating to assist with the recovery. Liquid acknowledged their contributions while stressing continued vigilance. The coordinated response demonstrates cryptocurrency networks' resilience against major exploits. However, full functionality restoration depends on completing reserve stabilization and additional security confirmations.
7Phased Recovery Timeline
The restoration process is progressing through carefully planned stages. Current phase includes monitored block production with node upgrades completed. Next steps involve reactivating transactions after stability confirmation, followed by peg system restoration. No estimated timeline exists yet for full service resumption, as thorough security reviews continue.
8Industry Impact
This incident highlights ongoing security challenges in blockchain interoperability solutions. Liquid's controlled response sets a precedent for handling major sidechain exploits. The $320M valuation makes this one of 2026's most significant cryptocurrency security events. The outcome will influence future sidechain design and emergency response protocols across the industry.
Original article: CryptoNinjas — Liquid Network Resumes Operations After $320M Bitcoin Exploit