{
  "version": 1,
  "event_id": "evt_1a01c4348191bd64",
  "url": "https://xiyu.news/events/evt_1a01c4348191bd64/",
  "json": "https://xiyu.news/api/events/evt_1a01c4348191bd64.json",
  "type": "security_incident",
  "status": "monitoring",
  "category": "crypto",
  "title": {
    "zh": "Blockstream 拒绝支付赎金，Liquid 比特币被盗事件持续发酵",
    "en": "Blockstream Rejects Ransom Demand After Liquid Bitcoin Exploit"
  },
  "current_state": {
    "zh": "Blockstream 公开拒绝为攻击者仍持有的约 598.5 枚 BTC（约 4700 万美元）支付赎金；此前 Liquid Network 侧链于周日遭利用漏洞攻击，约 4000 枚 BTC（价值约 3.2 亿美元）被转出。攻击者已于周一两班归还 3400 枚 BTC（约 85%），Liquid 也在周四恢复出块与交易处理，但作为预防措施，peg-out（跨链赎回）仍处于关闭状态。\n\n这是比特币侧链上规模最大的已确认损失之一，支撑 Liquid 上 L-BTC 的储备一度降至仅 197 枚 BTC，令市场开始质疑许多交易所与交易者依赖的联邦式跨链桥的安全假设。Blockstream 拒绝支付赎金的做法，也为基础设施开发者在面对以威胁索要漏洞赏金的攻击者时如何应对，树立了一个公开先例。\n\n根本原因是 Liquid 节点缓存 range proof（范围证明）验证结果的方式存在缺陷，攻击者据此凭空铸造无背书支持的 L-BTC，并通过持有 peg-out 授权密钥的联邦成员 SideSwap 将其兑换为储备中的比特币；据报并未发生私钥被盗。Blockstream 在十小时内修补了桥节点，并于周三发布 Elements v23.3.4，同时另行警告有骗子用假冒更新网站针对节点运营者行骗。",
    "en": "Blockstream rejected a ransom demand after an exploit on the Liquid Bitcoin sidechain, with 3,400 BTC returned, about 598.5 BTC still outstanding, and peg-outs disabled as transactions resumed."
  },
  "first_seen_at": "2026-09-11T16:40:47.386151+00:00",
  "last_updated_at": "2026-09-11T16:40:47.386151+00:00",
  "last_material_change_at": "2026-09-11T16:40:47.386151+00:00",
  "confidence": 0.75,
  "updates_count": 1,
  "sources_count": 1,
  "entities": [
    "after",
    "blockstream",
    "demand",
    "exploit",
    "liquid",
    "ransom",
    "rejects"
  ],
  "identifiers": [],
  "topics": [
    "blockstream",
    "liquid-network"
  ],
  "updates": [
    {
      "update_id": "upd_a47f7fd6062105f7",
      "event_id": "evt_1a01c4348191bd64",
      "occurred_at": "2026-09-11T14:42:37Z",
      "published_at": "2026-09-11T14:42:37Z",
      "first_seen_at": "2026-09-11T16:40:47.386151Z",
      "time_precision": "published",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "Blockstream 拒绝支付赎金，Liquid 比特币被盗事件持续发酵",
      "title_en": "Blockstream Rejects Ransom Demand After Liquid Bitcoin Exploit",
      "what_changed_zh": "Blockstream 公开拒绝为攻击者仍持有的约 598.5 枚 BTC（约 4700 万美元）支付赎金；此前 Liquid Network 侧链于周日遭利用漏洞攻击，约 4000 枚 BTC（价值约 3.2 亿美元）被转出。攻击者已于周一两班归还 3400 枚 BTC（约 85%），Liquid 也在周四恢复出块与交易处理，但作为预防措施，peg-out（跨链赎回）仍处于关闭状态。\n\n这是比特币侧链上规模最大的已确认损失之一，支撑 Liquid 上 L-BTC 的储备一度降至仅 197 枚 BTC，令市场开始质疑许多交易所与交易者依赖的联邦式跨链桥的安全假设。Blockstream 拒绝支付赎金的做法，也为基础设施开发者在面对以威胁索要漏洞赏金的攻击者时如何应对，树立了一个公开先例。\n\n根本原因是 Liquid 节点缓存 range proof（范围证明）验证结果的方式存在缺陷，攻击者据此凭空铸造无背书支持的 L-BTC，并通过持有 peg-out 授权密钥的联邦成员 SideSwap 将其兑换为储备中的比特币；据报并未发生私钥被盗。Blockstream 在十小时内修补了桥节点，并于周三发布 Elements v23.3.4，同时另行警告有骗子用假冒更新网站针对节点运营者行骗。",
      "what_changed_en": "Blockstream rejected a ransom demand after an exploit on the Liquid Bitcoin sidechain, with 3,400 BTC returned, about 598.5 BTC still outstanding, and peg-outs disabled as transactions resumed.",
      "current_state_zh": "Blockstream 公开拒绝为攻击者仍持有的约 598.5 枚 BTC（约 4700 万美元）支付赎金；此前 Liquid Network 侧链于周日遭利用漏洞攻击，约 4000 枚 BTC（价值约 3.2 亿美元）被转出。攻击者已于周一两班归还 3400 枚 BTC（约 85%），Liquid 也在周四恢复出块与交易处理，但作为预防措施，peg-out（跨链赎回）仍处于关闭状态。\n\n这是比特币侧链上规模最大的已确认损失之一，支撑 Liquid 上 L-BTC 的储备一度降至仅 197 枚 BTC，令市场开始质疑许多交易所与交易者依赖的联邦式跨链桥的安全假设。Blockstream 拒绝支付赎金的做法，也为基础设施开发者在面对以威胁索要漏洞赏金的攻击者时如何应对，树立了一个公开先例。\n\n根本原因是 Liquid 节点缓存 range proof（范围证明）验证结果的方式存在缺陷，攻击者据此凭空铸造无背书支持的 L-BTC，并通过持有 peg-out 授权密钥的联邦成员 SideSwap 将其兑换为储备中的比特币；据报并未发生私钥被盗。Blockstream 在十小时内修补了桥节点，并于周三发布 Elements v23.3.4，同时另行警告有骗子用假冒更新网站针对节点运营者行骗。",
      "current_state_en": "Blockstream rejected a ransom demand after an exploit on the Liquid Bitcoin sidechain, with 3,400 BTC returned, about 598.5 BTC still outstanding, and peg-outs disabled as transactions resumed.",
      "detailed_summary_zh": "Blockstream rejected a ransom demand after an exploit on the Liquid Bitcoin sidechain, with 3,400 BTC returned, about 598.5 BTC still outstanding, and peg-outs disabled as transactions resumed.",
      "detailed_summary_en": "Blockstream rejected a ransom demand after an exploit on the Liquid Bitcoin sidechain, with 3,400 BTC returned, about 598.5 BTC still outstanding, and peg-outs disabled as transactions resumed.",
      "background_zh": "Liquid Network 是由 Blockstream 主导开发的比特币侧链，可实现比比特币主链更快、更私密的交易。用户通过联邦控制的钱包将比特币转入 Liquid（peg-in），并在侧链上获得等量的 Liquid Bitcoin（L-BTC）；peg-out 则销毁 L-BTC 并释放被锁定的比特币。L-BTC 的匿名金额由 range proof（范围证明）保护，这是 Elements 软件中使用的一种密码学证明，由 Liquid 节点验证，以确保无人凭空造币。",
      "background_en": "The Liquid Network is a Bitcoin sidechain developed largely by Blockstream that enables faster and more confidential transactions than Bitcoin's base layer. Users move bitcoin onto Liquid through a federation-controlled wallet (peg-in) and receive an equal amount of Liquid Bitcoin, or L-BTC, on the sidechain; peg-out burns L-BTC and releases the locked bitcoin. Anonymous L-BTC amounts are protected by range proofs, a cryptographic proof used in the Elements software that Liquid nodes validate to ensure no one creates coins out of thin air.",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "此次事件影响主要集中在 Liquid 相关领域：SideSwap 上的 L-BTC 流动性、支持 Liquid 充提的交易所柜台，以及因被盗而大幅缩水的联邦储备——peg-out 关闭意味着持有者当前无法将 L-BTC 兑回主链 BTC。更广泛的市场传导则通过市场对联邦式跨链桥与包装比特币设计情绪的变化实现，交易者正重新评估侧链形式比特币敞口背后的安全假设。",
      "market_impact_en": "The incident is concentrated in Liquid-adjacent segments: L-BTC liquidity on SideSwap, exchange desks supporting Liquid deposits and withdrawals, and the depleted federation reserve that backs the peg, with peg-outs disabled meaning holders cannot currently redeem L-BTC for base-layer BTC. Broader transmission runs through sentiment toward federated bridges and wrapped-BTC designs, as traders reassess the security assumptions behind sidechain-based bitcoin exposure.",
      "importance_score": 8.5,
      "references": [
        {
          "url": "https://news.bitcoin.com/crypto-news/blockstream-hunts-white-hats-after-4000-btc-leaves-liquid/",
          "title": "Blockstream Hunts 'White Hats' After 4,000 BTC Leaves Liquid"
        },
        {
          "url": "https://gizmodo.com/hackers-drain-320-million-from-bitcoins-liquid-network-keep-47-million-for-themselves-in-white-hat-operation-2000808262",
          "title": "Hackers Drain $320 Million From Bitcoin’s Liquid Network, Keep $47..."
        },
        {
          "url": "https://docs.liquid.net/docs/advanced-pegin-pegout",
          "title": "Peg-in and Peg-out - docs.liquid.net"
        }
      ],
      "confidence": 0.75,
      "story_ids": [
        "rss:thedefiant.io_api_feed:0057055c46c168ff"
      ],
      "sources": [
        {
          "url": "https://thedefiant.io/news/security/blockstream-rejects-ransom-demand-after-liquid-bitcoin-exploit",
          "label": "The Defiant",
          "source_type": "rss",
          "official": false
        }
      ]
    }
  ]
}