{ "version": 1, "event_id": "evt_24bb1335055701ee", "url": "https://xiyu.news/events/evt_24bb1335055701ee/", "json": "https://xiyu.news/api/events/evt_24bb1335055701ee.json", "type": "security_incident", "status": "monitoring", "category": "crypto", "title": { "zh": "Blockstream拒绝Liquid攻击者近600 BTC赏金索求", "en": "Blockstream bets 600 Bitcoin by rejecting Liquid hacker’s $50 million bounty demand" }, "current_state": { "zh": "9月11日，Blockstream公开拒绝了Liquid攻击者提出的、要求由其自有资金支付近600枚比特币（约5000万美元）赏金的主张；此前该攻击者已归还9月6日漏洞中被盗约3996枚比特币中的3400枚。Blockstream表示，若剩余资金未主动归还，将改由执法机构、交易所、服务商和取证专家进行追索。\n\n这场对峙为加密协议如何处理漏洞谈判树立先例，在威慑与返还之间权衡：拒绝付款可能遏制未来攻击，但也可能让黑客失去主动归还资金的动机。这直接影响Liquid用户——该网络目前仅约85%由储备支撑，且peg-in与peg-out均处于停用状态。\n\n攻击者要求10%的赏金，并警告否则持币者可能面临约15%的资金缺口；SideSwap表示，发起攻击的钱包资金经跨链桥可追溯至Tornado Cash，且攻击者在成功铸造前已用70笔类似交易演练过该模式。", "en": "Blockstream is refusing the Liquid attacker's demand for nearly 600 BTC (~$50M) after 3,400 BTC was returned from the September exploit, leaving Liquid about 85% reserve-backed with peg-ins and peg-outs disabled." }, "first_seen_at": "2026-09-12T08:44:59.999517+00:00", "last_updated_at": "2026-09-12T08:44:59.999517+00:00", "last_material_change_at": "2026-09-12T08:44:59.999517+00:00", "confidence": 0.75, "updates_count": 1, "sources_count": 1, "entities": [ "blockstream", "liquid" ], "identifiers": [], "topics": [ "blockstream", "liquid-network" ], "updates": [ { "update_id": "upd_d441b7740681b0b0", "event_id": "evt_24bb1335055701ee", "occurred_at": "2026-09-12T07:20:37Z", "published_at": "2026-09-12T07:20:37Z", "first_seen_at": "2026-09-12T08:44:59.999517Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "Blockstream拒绝Liquid攻击者近600 BTC赏金索求", "title_en": "Blockstream bets 600 Bitcoin by rejecting Liquid hacker’s $50 million bounty demand", "what_changed_zh": "9月11日，Blockstream公开拒绝了Liquid攻击者提出的、要求由其自有资金支付近600枚比特币（约5000万美元）赏金的主张；此前该攻击者已归还9月6日漏洞中被盗约3996枚比特币中的3400枚。Blockstream表示，若剩余资金未主动归还，将改由执法机构、交易所、服务商和取证专家进行追索。\n\n这场对峙为加密协议如何处理漏洞谈判树立先例，在威慑与返还之间权衡：拒绝付款可能遏制未来攻击，但也可能让黑客失去主动归还资金的动机。这直接影响Liquid用户——该网络目前仅约85%由储备支撑，且peg-in与peg-out均处于停用状态。\n\n攻击者要求10%的赏金，并警告否则持币者可能面临约15%的资金缺口；SideSwap表示，发起攻击的钱包资金经跨链桥可追溯至Tornado Cash，且攻击者在成功铸造前已用70笔类似交易演练过该模式。", "what_changed_en": "Blockstream is refusing the Liquid attacker's demand for nearly 600 BTC (~$50M) after 3,400 BTC was returned from the September exploit, leaving Liquid about 85% reserve-backed with peg-ins and peg-outs disabled.", "current_state_zh": "9月11日，Blockstream公开拒绝了Liquid攻击者提出的、要求由其自有资金支付近600枚比特币（约5000万美元）赏金的主张；此前该攻击者已归还9月6日漏洞中被盗约3996枚比特币中的3400枚。Blockstream表示，若剩余资金未主动归还，将改由执法机构、交易所、服务商和取证专家进行追索。\n\n这场对峙为加密协议如何处理漏洞谈判树立先例，在威慑与返还之间权衡：拒绝付款可能遏制未来攻击，但也可能让黑客失去主动归还资金的动机。这直接影响Liquid用户——该网络目前仅约85%由储备支撑，且peg-in与peg-out均处于停用状态。\n\n攻击者要求10%的赏金，并警告否则持币者可能面临约15%的资金缺口；SideSwap表示，发起攻击的钱包资金经跨链桥可追溯至Tornado Cash，且攻击者在成功铸造前已用70笔类似交易演练过该模式。", "current_state_en": "Blockstream is refusing the Liquid attacker's demand for nearly 600 BTC (~$50M) after 3,400 BTC was returned from the September exploit, leaving Liquid about 85% reserve-backed with peg-ins and peg-outs disabled.", "detailed_summary_zh": "Blockstream is refusing the Liquid attacker's demand for nearly 600 BTC (~$50M) after 3,400 BTC was returned from the September exploit, leaving Liquid about 85% reserve-backed with peg-ins and peg-outs disabled.", "detailed_summary_en": "Blockstream is refusing the Liquid attacker's demand for nearly 600 BTC (~$50M) after 3,400 BTC was returned from the September exploit, leaving Liquid about 85% reserve-backed with peg-ins and peg-outs disabled.", "background_zh": "Liquid是比特币的二层侧链，允许BTC以L-BTC形式\"peg-in\"转入，并可\"peg-out\"转回主链，L-BTC本应是主链上锁定比特币的1:1代表。Blockstream负责开发Liquid Network，SideSwap则是用于BTC与L-BTC兑换的结算基础设施。在9月6日的漏洞中，攻击者得以凭空铸造无背书的L-BTC，打破了1:1储备假设，并从锚定池中抽走了真实BTC。", "background_en": "Liquid is a Bitcoin layer-2 sidechain that lets BTC be moved onto it as L-BTC (a \"peg-in\") and back to the mainchain (a \"peg-out\"), with L-BTC designed as a 1:1 representation of bitcoin locked on the mainchain. Blockstream develops the Liquid Network, and SideSwap is settlement infrastructure used for swapping BTC for L-BTC. In the Sept. 6 exploit, a vulnerability let the attacker create unbacked L-BTC, breaking that 1:1 backing assumption and draining real BTC from the peg.", "community_discussion_zh": "各方在激励问题上意见分歧：USDT0联合创始人Lorenzo Romagnoli认为Blockstream是\"百分之一中的百分之一\"最幸运的被黑协议，并警告拒绝支付可观赏金可能让未来的灰帽攻击者不再愿意归还资金。Samson Mow则反驳称，赏金金额不能按网络总价值计算——该数值混合了L-BTC、Tether及第三方资产——并坚持所有用户资产必须全额归还。", "community_discussion_en": "Commentators split over incentives: USDT0 co-founder Lorenzo Romagnoli argued Blockstream is \"in the 1% of the 1%\" luckiest hacked protocols and warned that refusing a substantial bounty may discourage future grey-hat attackers from returning funds. Samson Mow countered that bounty amounts cannot be calculated from the network's total value, which mixes L-BTC, Tether and third-party assets, and insisted all users' assets must be returned in full.", "market_impact_zh": "peg-in与peg-out停用冻结了L-BTC 1:1赎回BTC的主要通道，使Liquid持币者与发行方面临网络约85%储备支撑的风险敞口，而未解决的约600枚比特币缺口则通过L-BTC定价与跨链桥信任传导。该事件也会影响市场对比特币侧链及封装资产托管风险的信心。", "market_impact_en": "The disabled peg-in/peg-out freezes the primary route for L-BTC to be redeemed 1:1 for BTC, exposing Liquid holders and issuers to the network's ~85% reserve backing, while the unresolved ~600 BTC gap transmits through L-BTC pricing and cross-chain bridge trust. The episode also feeds sentiment around Bitcoin sidechain and wrapped-asset custody risk.", "importance_score": 8.5, "references": [ { "url": "https://help.blockstream.com/hc/en-us/articles/900001551783-What-is-a-Liquid-peg-out", "title": "What is a Liquid peg-out? – Blockstream Help Center" }, { "url": "https://help.blockstream.com/hc/en-us/articles/900001387966-What-is-a-Liquid-peg-in", "title": "What is a Liquid peg-in? – Blockstream Help Center" }, { "url": "https://sideswap.io/?ref=tftc.ghost.io", "title": "SideSwap - Settlement infrastructure of the Liquid Network" } ], "confidence": 0.75, "story_ids": [ "rss:cryptoslate.com_feed_:ce8eefbb48c96cad" ], "sources": [ { "url": "https://cryptoslate.com/blockstream-bets-600-bitcoin-by-rejecting-liquid-hackers-50-million-bounty-demand/", "label": "CryptoSlate", "source_type": "rss", "official": false } ] } ] }