Liquid Network
From Invertopedia, the encyclopedia of how things fail
Liquid Network is a Bitcoin sidechain run by Blockstream. On September 6, 2026, an attacker used a bug in its Elements software to mint roughly 4,000 L-BTC with no bitcoin behind them[1][2]. The attacker pegged them out for real bitcoin, about $320 million at the time and about 95% of the reserve[1][2]. The attacker later sent back 3,400 BTC and kept 598.5 BTC, about $47 million, calling it a bounty[1].
What happened
| Aug 3, 2026 | The fix is committed to the Elements master branch. It is merged on Sept 2 but never reaches a tagged release.[1] |
|---|---|
| Sept 6, 2026 | One peg-out of 3,996 BTC at 14:28 UTC cuts the reserve from 4,205 BTC to 202 BTC.[1] |
| Sept 7, 2026 | Block production halts at 04:49 UTC. After the bridge nodes are patched, 3,400 BTC comes back.[1] |
The kill shot
The federation's nodes were running a version of the software that lacked the fix for the bug.
The nodes were on version 23.3.3 from April, which lacked the fix[1]. No private key was compromised[3].
The inversion
A fix that is merged but not released protects nobody. Ship the patch to every node before you call it fixed.
References
- ^ “Liquid Network drained of $320M in cache bug exploit”. crypto.news, September 2026. Date, 3,996 BTC peg-out, reserve drop, cache-key cause, fix timeline, node version, return of 3,400 BTC, 598.5 BTC kept, halt.
- ^ “Explained: The Liquid Network Hack (September 2026)”. Halborn, September 9, 2026. About 4,000 unbacked L-BTC, 95% of reserve, cache-key collision, unreleased patch.
- ^ “Liquid Network: A $320 Million Bridge Bug and a White Hat's Bounty”. BIT Knowledge Hub, September 13, 2026. No key compromised; returned 85%; Blockstream refused to pay.