The disclosure arrived through an official statement dated September 6, 2026, and remains an initial update rather than a final, audited accounting of losses. Both the Bitcoin quantity and the dollar valuation are approximate issuer estimates, and permanent net loss after any recoveries has not been established.
Liquid Network, the Bitcoin-anchored federated sidechain operated with Blockstream, has publicly acknowledged a security incident in which purported white-hat hackers withdrew roughly 4,000 BTC, valued by the project at about USD 320 million, from the Liquid Federation wallet, prompting the network to disable bridge nodes and effectively pause the sidechain.
The disclosure arrived through an official statement dated September 6, 2026, and remains an initial update rather than a final, audited accounting of losses. Both the Bitcoin quantity and the dollar valuation are approximate issuer estimates, and permanent net loss after any recoveries has not been established. For related coverage, see Liquid Network Says Purported White Hats Withdrew 4,000 BTC.
What Liquid Network has confirmed so far
In its official incident announcement, Liquid said the funds were withdrawn from the Liquid Federation wallet by parties it described as purported white-hat hackers. The project stated that the withdrawal occurred via SideSwap’s PAK, the Peg-out Authorization Key, and that this key and its other keys were not compromised. For related coverage, see AgriNext Awards & Conference Dubai 2026: Where Agriculture Leaders, Innovators and Investors Shape the Future of Food Systems.
Liquid said it temporarily disabled bridge nodes, which prevented submission of new transactions and effectively paused the sidechain. The project also said exchanges had been notified and had already paused, or would pause, L-BTC deposits and withdrawals, a distinction our coverage of the network halt examined in operational terms.
The withdrawal figure is the central reported number in the incident and carries explicit uncertainty from the issuer itself.
BTC withdrawal reported by Liquid
~4,000 BTC
Liquid’s estimated value: ~US$320 million
Liquid stated that USDT, DePix and real-world assets issued on the network were unaffected by the security incident. That asset-impact statement does not imply those transfers stayed operational, since the network pause blocked new transactions while bridge nodes were down.
The project said Blockstream was working to contact the perpetrators on-chain using a signed message. That effort does not confirm any funds have been returned, and the identity, intent and return terms of the parties remain unconfirmed, according to Liquid’s own framing of them as purported white hats.
Because the announcement itself is the primary source, we reproduce it here as filed rather than as a paraphrase.
We are aware of a security incident on @Liquid_BTC. Purported white-hat hackers have withdrawn ~4,000 BTC (~$320 million) from the Liquid Federation wallet. The @Blockstream team is working on contacting them on-chain with a signed message.
What we know so far is that the funds…
— Liquid Network 🌊 (@Liquid_BTC) September 6, 2026
Source: @Liquid_BTC on X
What would substantiate the reported loss
Independent reporting has begun to fill in the reserve context. A Bloomberg report republished by The Straits Times said that roughly 4,000 of the 4,200 BTC held in the Liquid Federation wallet were taken, resolving the currency confusion in its own headline by placing the valuation at US$320 million, or S$405 million.
That reserve denominator is secondary reporting, not a figure independently reconstructed on-chain here. No explorer pages or transaction hashes were traced for this account, so the exact outflow, the valuation at the time of the event, and the precise reserve balance remain unverified at the ledger level.
Distinguishing funds alleged withdrawn from any eventual net loss matters precisely because Blockstream’s outreach to the parties is ongoing and no recovery has been confirmed. Our report on the reserve drawdown treats the amount as a reported exposure rather than a settled loss.
Bloomberg attributed to Aneirin Flynn, chief executive of security firm FailSafe, a preliminary assessment that a bug allowing L-BTC minting was involved and that the incident exposed weaknesses in Liquid’s validation and backing model. Flynn’s assessment is an attributed early view, not a confirmed root cause, and no technical postmortem or transaction reconstruction has been published.
Why the Bitcoin layer 2 framing needs precision
Liquid is a federated sidechain rather than Bitcoin’s base layer. A technical explainer published July 22, 2026 describes it as a network whose blocks are produced by functionary operators, with normal settlement requiring two confirmations, about two minutes.
That architecture is the reason the incident could be contained by disabling bridge nodes: the reported compromise concerns the federation’s peg mechanism and the L-BTC representation of bitcoin, not the security of Bitcoin’s own proof-of-work chain. Nothing in the disclosures indicates that Bitcoin’s base layer or its monetary properties were affected.
The scope framing also separates this event from smart-contract exploits on other networks, such as the four-hour Injective freeze tied to a USD 4.9 million exploit, where a chain halt followed a different failure mode.
Market backdrop remains detached from the incident
Bitcoin traded at USD 79,328 at the time of the snapshot, down about 0.66% over 24 hours, with a market capitalization near USD 1.59 trillion and daily volume around USD 22.6 billion. That reading establishes no causal link to the Liquid incident and should not be read as an event-time reaction.
Broad sentiment, meanwhile, sat firmly in expansion territory. The Crypto Fear & Greed Index registered 71, classified as Greed, as of September 7, 2026, a market-wide gauge rather than an incident-specific measure.
For now the substantiated record is narrow: an official acknowledgment of an approximate withdrawal, one independent incident report, and a named industry reaction, set against a Bitcoin settlement layer that itself continued producing blocks throughout.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
