{ "version": 1, "event_id": "evt_c8eeb2561cb07df2", "url": "https://xiyu.news/events/evt_c8eeb2561cb07df2/", "json": "https://xiyu.news/api/events/evt_c8eeb2561cb07df2.json", "type": "security_incident", "status": "monitoring", "category": "crypto", "title": { "zh": "白帽黑客提取3.2亿美元比特币，Liquid网络暂停", "en": "Liquid Network pauses after purported ‘white-hat’ hackers withdraw $320 million in bitcoin" }, "current_state": { "zh": "Liquid网络仍处于暂停状态，部分资金（3,400 BTC）已确认归还至联邦钱包，但攻击者仍保有598.5 BTC，赎回通道未开放，Blockstream状态页面显示事件持续，资金支持和恢复仍有待确认。", "en": "The Liquid Network remains paused; 3,400 BTC have been confirmed returned to the federation wallet, but the attacker retains approximately 598.5 BTC; redemption access is not restored, Blockstream's status page shows the incident continuing, and full backing and recovery remain unconfirmed." }, "first_seen_at": "2026-09-06T22:13:15.375035+00:00", "last_updated_at": "2026-09-08T16:47:13.470928+00:00", "last_material_change_at": "2026-09-08T16:47:13.470928+00:00", "confidence": 0.75, "updates_count": 7, "sources_count": 16, "entities": [ "after", "attacker", "blockstream", "broadcasts", "btc", "federation", "how", "keeps", "leaves", "liquid", "liquid-network", "paused", "return", "sidechain", "tokens", "wallet" ], "identifiers": [], "topics": [ "blockstream", "btc", "hack", "liquid", "liquid-network", "recovery", "sidechain" ], "updates": [ { "update_id": "upd_ea2e704d45bf9957", "event_id": "evt_c8eeb2561cb07df2", "occurred_at": "2026-09-06T21:14:36Z", "published_at": "2026-09-06T21:14:36Z", "first_seen_at": "2026-09-06T22:13:15.375035Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "白帽黑客提取3.2亿美元比特币，Liquid网络暂停", "title_en": "Liquid Network pauses after purported ‘white-hat’ hackers withdraw $320 million in bitcoin", "what_changed_zh": "Blockstream已暂停比特币侧链Liquid Network，此前据称白帽黑客提取了约3.2亿美元的比特币。多个交易所已暂停LBTC的充值提现，Blockstream正试图与相关人士取得联系。\n\n这是比特币侧链上规模最大的安全事件之一，引发了对比特币二层方案及LBTC等锚定资产安全性的担忧。网络暂停与交易所停提可能影响Liquid Network相关资产的用户与流动性，凸显了可信侧链模式中依然存在的风险。\n\n据报道，本次提取涉及在Liquid侧链上持有的约3.2亿美元比特币，但作案者仅被称为“所谓的”白帽黑客，其声称出于安全目的而行动的伦理主张尚未得到证实。在Blockstream联系相关方并调查期间，该网络仍处于暂停状态。", "what_changed_en": "Liquid Network pauses operations after purported white-hat hackers withdraw $320 million in bitcoin, prompting exchanges to suspend LBTC deposits and withdrawals.", "current_state_zh": "Blockstream已暂停比特币侧链Liquid Network，此前据称白帽黑客提取了约3.2亿美元的比特币。多个交易所已暂停LBTC的充值提现，Blockstream正试图与相关人士取得联系。\n\n这是比特币侧链上规模最大的安全事件之一，引发了对比特币二层方案及LBTC等锚定资产安全性的担忧。网络暂停与交易所停提可能影响Liquid Network相关资产的用户与流动性，凸显了可信侧链模式中依然存在的风险。\n\n据报道，本次提取涉及在Liquid侧链上持有的约3.2亿美元比特币，但作案者仅被称为“所谓的”白帽黑客，其声称出于安全目的而行动的伦理主张尚未得到证实。在Blockstream联系相关方并调查期间，该网络仍处于暂停状态。", "current_state_en": "Liquid Network pauses operations after purported white-hat hackers withdraw $320 million in bitcoin, prompting exchanges to suspend LBTC deposits and withdrawals.", "detailed_summary_zh": "Liquid Network pauses operations after purported white-hat hackers withdraw $320 million in bitcoin, prompting exchanges to suspend LBTC deposits and withdrawals.", "detailed_summary_en": "Liquid Network pauses operations after purported white-hat hackers withdraw $320 million in bitcoin, prompting exchanges to suspend LBTC deposits and withdrawals.", "background_zh": "Liquid Network是Blockstream开发的开源比特币侧链和layer-2解决方案，旨在实现更快、更便宜且支持机密交易的比特币交易，并支持数字资产的发行。在Liquid上，比特币以LBTC表示，与BTC 1:1锚定，用于交易、借贷和转账。与比特币主链不同，Liquid依赖一组受信任的联盟成员共同托管资金，因此它是一种基于信任的模式，而非完全去中心化。", "background_en": "The Liquid Network is an open-source Bitcoin sidechain and layer-2 solution developed by Blockstream, designed to enable faster, more affordable, and confidential Bitcoin transactions as well as the issuance of digital assets. On Liquid, bitcoin is represented by LBTC, a token pegged 1:1 to BTC and used for trading, lending, and transfers. Unlike Bitcoin's main chain, Liquid relies on a group of authorized federation members to jointly secure funds, which makes it a trust-based model rather than a fully decentralized one.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "这一事件暴露了侧链或桥接资产的风险：交易所已暂停LBTC充值与提现，这可能减少LBTC交易对的流动性，并加剧市场参与者对交易对手方及安全性的担忧。该事件也可能影响市场对比特币二层产品的信心，但具体市场影响将取决于网络恢复的速度与调查结果。", "market_impact_en": "The incident exposes risks in sidechain or bridged assets: exchanges have already suspended LBTC deposits and withdrawals, which can diminish available liquidity for LBTC trading pairs and raise counterparty and security concerns among market participants. This could also color sentiment toward Bitcoin layer-2 products, though the concrete market impact depends on the speed of the network's recovery and investigation outcomes.", "importance_score": 9.0, "references": [ { "url": "https://docs.liquid.net/docs/technical-overview", "title": "Technical Overview - Documentation - The Liquid Network" }, { "url": "https://blockstream.com/liquid/", "title": "The Liquid Network | Bitcoin layer-2 solution for digital asset issuance." }, { "url": "https://river.com/learn/terms/l/liquid-network/", "title": "Liquid Network - River Financial" }, { "url": "https://www.technadu.com/320-million-vanishes-from-liquid-networks-bitcoin-reserves-and-the-hackers-say-theyre-the-good-guys/635599/", "title": "Liquid Network Hack: $320M in Bitcoin Withdrawn via SideSwap - TechNadu" }, { "url": "https://news.bitcoin.com/security/blockstream-to-liquid-network-hacker-safe-to-return-the-funds/", "title": "Blockstream to Liquid Network Hacker: 'Safe to Return the Funds'" }, { "url": "https://crypto.news/blockstream-launches-the-liquid-network-bitcoins-first-sidechain/", "title": "Blockstream Launches the Liquid Network, Bitcoin’s First Sidechain" } ], "confidence": 0.75, "story_ids": [ "rss:www.theblock.co_rss.xml:d1e5d6fc899ed822", "gdelt:article:20260907T064500Z::https://www.ksl.com:443/article/51620859/bitcoin-based-liquid-network-says-320-million-withdrawn-in-hack" ], "sources": [ { "url": "https://www.theblock.co/news/defi/2026-09-06-liquid-network-pauses-after-purported-white-hat-hackers-withdraw-320-million-in-bitcoin-413626", "label": "The Block", "source_type": "rss", "official": false }, { "url": "https://www.ksl.com/article/51620859/bitcoin-based-liquid-network-says-320-million-withdrawn-in-hack", "label": "ksl.com", "source_type": "gdelt", "official": false } ] }, { "update_id": "upd_859c1aec0061613a", "event_id": "evt_c8eeb2561cb07df2", "occurred_at": "2026-09-06T23:15:09Z", "published_at": "2026-09-06T23:15:09Z", "first_seen_at": "2026-09-07T00:31:17.854172Z", "time_precision": "published", "update_type": "confirmation", "material_change": true, "title_zh": "Liquid 侧链暂停：联邦钱包流出 3,998 BTC", "title_en": "Liquid Sidechain Paused After 3,998 BTC Leaves Federation Wallet", "what_changed_zh": "具体指出约 3,998 BTC（价值约 3.2 亿美元）被提取至单一地址，收款方在交易中留言“我们是白帽黑客”。此举使联邦钱包的比特币储备几乎归零，可能导致在资金归还前无法进行peg-out。", "what_changed_en": "Specified that approximately 3,998 BTC (worth ~$320 million) were withdrawn to a single address, with the recipient writing 'we are whitehats' in the transaction. This nearly depleted the federation wallet's Bitcoin reserves, potentially preventing peg-outs until the funds are returned.", "current_state_zh": "Liquid 网络在自称白帽黑客提取约 3,998 BTC 至单一地址后仍处于暂停状态，联邦钱包储备接近归零，或需等待资金归还才能恢复脱钩提现。", "current_state_en": "Liquid Network remains paused after self-identified white-hat hackers withdrew ~3,998 BTC to a single address, leaving the federation wallet's reserves near zero and potentially preventing peg-outs until funds are returned.", "detailed_summary_zh": "Blockstream 旗下 Liquid 侧链在几乎全部用于支持 L-BTC 的比特币储备（约 3,998 BTC）被提取至一个单一地址后，暂停了其桥接节点。收款方在交易中写入“我们是白帽黑客”。\n\n此事件影响重大，因为 L-BTC 是一种 1:1 比特币锚定资产，其锚定的安全性取决于联邦钱包的储备。如果被提取的比特币无法妥善保管并归还，Liquid 及同类侧链的信任可能受到动摇。\n\n该笔转账使联邦钱包中的比特币储备几乎归零，在资金归还前可能无法进行 peg-out（脱钩提现）。地址所有者的“我们是白帽黑客”信息暗示这是一次声明的救援行动，但尚未有官方确认发布。", "detailed_summary_en": "Blockstream's Liquid sidechain disabled its bridge nodes after nearly all the bitcoin reserves backing L-BTC, approximately 3,998 BTC, were withdrawn to a single address. The recipient wrote \"we are whitehats\" in the transaction.\n\nThis event is significant because L-BTC is a 1:1 Bitcoin-backed asset, and the safety of its peg depends on the federation wallet's reserves. If the withdrawn Bitcoin is not fully secured and returned, trust in Liquid and similar sidechains could be shaken.\n\nThe move reduced the federation wallet's Bitcoin reserves to near zero, potentially preventing peg-outs until the coins are returned. The address owner's \"we are whitehats\" message suggests a claimed rescue, but official confirmation has not been published.", "background_zh": "Liquid Network 是一个开源比特币侧链及第二层解决方案，专注于快速、保密的比特币交易和数字资产发行。用户将 BTC 存入由 Liquid Federation 控制的多签钱包，并获取 L-BTC——一种在侧链上 1:1 锚定的代币。由于 L-BTC 的价值依赖于主链储备，若大额比特币被提取至外部地址且未追回，锚定可能会失灵。", "background_en": "The Liquid Network is an open-source Bitcoin sidechain and layer-2 solution focused on fast, confidential Bitcoin transactions and digital asset issuance. Users peg in BTC to a multisig wallet controlled by the Liquid Federation and receive L-BTC, a 1:1 backed token on the sidechain. Because L-BTC's value depends on mainchain reserves, a large withdrawal to an external address could break the peg if not recovered.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "此事件暴露了 L-BTC 锚定的托管与偿付风险：Liquid 已暂停桥接，几乎所有主链储备均已转移至未经验证的地址。对市场的传导渠道在于储备偿付能力和提现可用性，影响 L-BTC 以及依赖该侧链锚定运行的已发行资产。", "market_impact_en": "This incident exposes custody and solvency risks in the L-BTC peg, since Liquid has paused its bridge and nearly all mainchain reserves have moved to an unverified address. The transmission channel to markets is reserve solvency and withdrawal availability, affecting L-BTC and assets issued on Liquid that depend on the sidechain's peg functioning.", "importance_score": 9.0, "references": [ { "url": "https://blockstream.com/liquid/", "title": "The Liquid Network | Bitcoin layer-2 solution for digital asset issuance." }, { "url": "https://docs.liquid.net/docs/technical-overview", "title": "Technical Overview - Documentation - The Liquid Network" }, { "url": "https://help.blockstream.com/liquid-network/faqs/how-does-liquid-bitcoin-lbtc-work", "title": "Blockstream Help Center | How does Liquid Bitcoin (LBTC) work?" }, { "url": "https://shattered.io/liquid-network-320-million-hack-2026/", "title": "Liquid Network Hack: $320M Bitcoin Sidechain Exploit [2026]" }, { "url": "https://www.coindesk.com/markets/2026/09/07/bitcoin-network-used-by-exchanges-hit-by-usd320-million-exploit-hackers-claim-they-re-the-good-guys", "title": "$320 million bitcoin exploit hits Liquid Network. Hacker ..." }, { "url": "https://liquid.net/", "title": "The Liquid Network: The Financial Layer for Bitcoin Capital Markets" } ], "confidence": 0.95, "story_ids": [ "rss:thedefiant.io_api_feed:0023433b27f57fec", "google_news:article:1763e2b7a7d7cf05", "gdelt:article:20260907T051500Z::https://lufkindailynews.com/news_reuters/business/bitcoin-based-liquid-network-says-320-million-withdrawn-in-hack/article_490f69f9-3c80-5b2f-931d-a0d5fa6ad5d7.html", "gdelt:article:20260907T053000Z::https://www.thestar.com.my/tech/tech-news/2026/09/07/bitcoin-based-liquid-network-says-320-million-withdrawn-in-hack", "gdelt:article:20260907T051500Z::https://finance.yahoo.com/markets/crypto/articles/bitcoin-based-liquid-network-says-040533085.html", "google_news:article:77527cf4efb33c91" ], "sources": [ { "url": "https://thedefiant.io/news/security/liquid-sidechain-paused-after-3998-btc-leaves-federation-wallet", "label": "The Defiant", "source_type": "rss", "official": false }, { "url": "https://news.google.com/rss/articles/CBMijgFBVV95cUxNdFBiTFJfSDk3c3RTT1dDS1VrWmtZN2ZSYmpXNDhST1RJOTh0cWt4YU5ydDdDOEV4ZXVHTFhSSGxKZW9RU2lXaXhzX2tSRlJoUURkU3c4ZjFfcXdrOXZXNWI3Ty0xY1d5Z1hCbEFfNFdYSTh5YndPWG85V0R6bFZsN1JLV2M1aFVPbEh0SW5R?oc=5", "label": "blockchain.news", "source_type": "google_news", "official": false }, { "url": "https://lufkindailynews.com/news_reuters/business/bitcoin-based-liquid-network-says-320-million-withdrawn-in-hack/article_490f69f9-3c80-5b2f-931d-a0d5fa6ad5d7.html", "label": "lufkindailynews.com", "source_type": "gdelt", "official": false }, { "url": "https://www.thestar.com.my/tech/tech-news/2026/09/07/bitcoin-based-liquid-network-says-320-million-withdrawn-in-hack", "label": "thestar.com.my", "source_type": "gdelt", "official": false }, { "url": "https://finance.yahoo.com/markets/crypto/articles/bitcoin-based-liquid-network-says-040533085.html", "label": "finance.yahoo.com", "source_type": "gdelt", "official": false }, { "url": "https://news.google.com/rss/articles/CBMifkFVX3lxTE1nN0lySEdxR0UzalpQUlUzY2Y2SGJSa3dyRHprQTk0ZTVHU1dXY1FvcFkxdGVWaS04Z3JoeXFmd3dpS3J0Um12cUNLR0FrLV8zOW91NGdXZEpOcXNRbTVzakY2bml2NEVKTURlLWU3ZkFqbHdaT2IteHc1OXB4dw?oc=5", "label": "Binance", "source_type": "google_news", "official": false } ] }, { "update_id": "upd_95653bdffbde14c0", "event_id": "evt_c8eeb2561cb07df2", "occurred_at": "2026-09-07T05:40:05Z", "published_at": "2026-09-07T05:40:05Z", "first_seen_at": "2026-09-07T09:34:09.103537Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "比特币侧链 Liquid 暂停运行，此前疑似“白帽”提取了 3.2 亿美元的 BTC", "title_en": "Bitcoin sidechain Liquid pauses after purported ‘white hats’ withdraw $320M in BTC", "what_changed_zh": "白帽黑客通过链上消息与 Blockstream 进行联系，并承诺在漏洞修复及节点更新后归还大部分比特币，但目前资金尚未归还。同时披露了更多谈判细节。", "what_changed_en": "White-hat hackers contacted Blockstream via on-chain messages, promising to return most of the Bitcoin after the vulnerability is patched and nodes updated; funds have not yet been returned. Additional negotiation details were disclosed.", "current_state_zh": "Liquid 网络仍暂停，白帽黑客已与 Blockstream 进行谈判并承诺在漏洞修复后归还资金，但目前尚未归还，联邦钱包大部分比特币仍由黑客控制。", "current_state_en": "Liquid Network remains paused; white-hat hackers have negotiated with Blockstream and promised to return funds after patching, but funds have not yet been returned, and most of the federation wallet's Bitcoin remains under the hackers' control.", "detailed_summary_zh": "Bitcoin sidechain Liquid pauses operations after purported white-hat hackers withdraw $320M in BTC, promising return after vulnerability patch.", "detailed_summary_en": "Bitcoin sidechain Liquid pauses operations after purported white-hat hackers withdraw $320M in BTC, promising return after vulnerability patch.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 8.5, "references": [], "confidence": 0.95, "story_ids": [ "rss:cointelegraph.com_rss:9c816436a3a93fd3", "rss:decrypt.co_feed:174f57f5d36b3dbb" ], "sources": [ { "url": "https://cointelegraph.com/news/liquid-network-pauses-320m-bitcoin-withdrawal?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound", "label": "Cointelegraph", "source_type": "rss", "official": false }, { "url": "https://decrypt.co/377528/purported-white-hat-hackers-withdraw-320m-in-bitcoin-from-liquid", "label": "Decrypt", "source_type": "rss", "official": false } ] }, { "update_id": "upd_20b32ffc42979a2f", "event_id": "evt_c8eeb2561cb07df2", "occurred_at": "2026-09-07T12:20:26Z", "published_at": "2026-09-07T12:20:26Z", "first_seen_at": "2026-09-07T17:50:00.058019Z", "time_precision": "published", "update_type": "confirmation", "material_change": true, "title_zh": "4,000 枚 BTC 是如何走出 Blockstream 的 Liquid Network 的", "title_en": "How 4,000 BTC walked out of Blockstream’s Liquid Network", "what_changed_zh": "详细披露了攻击手法：攻击者利用Elements软件中的校验漏洞，通过SideSwap的PAK授权从联邦钱包中提取了约4000 BTC，绕过了紧急备用密钥路径，所有输入均使用11/15签名成功完成交易。", "what_changed_en": "Detailed the attack method: the attacker exploited a validation flaw in the Elements software, using SideSwap's PAK authorization to withdraw ~4,000 BTC from the federation wallet, bypassing the emergency backup key path, with all inputs spending 11 of the 15 required signatures.", "current_state_zh": "Liquid 网络仍暂停，白帽黑客已与 Blockstream 谈判并承诺归还资金但未归还，大部分BTC仍由黑客控制，具体攻击细节已披露。", "current_state_en": "Liquid Network remains paused; white-hat hackers have negotiated but not yet returned funds, with most BTC still under their control; detailed attack method now disclosed.", "detailed_summary_zh": "Blockstream's Liquid Network was hacked, with approximately 4,000 BTC (~$320M) drained from its federation wallet via a faulty LBTC redemption, prompting a pause of the sidechain.", "detailed_summary_en": "Blockstream's Liquid Network was hacked, with approximately 4,000 BTC (~$320M) drained from its federation wallet via a faulty LBTC redemption, prompting a pause of the sidechain.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 9.0, "references": [], "confidence": 0.9, "story_ids": [ "rss:protos.com_feed_:cb619437abd2da25" ], "sources": [ { "url": "https://protos.com/how-4000-btc-walked-out-of-blockstreams-liquid-network/", "label": "Protos", "source_type": "rss", "official": false } ] }, { "update_id": "upd_46b1b1baa58496b2", "event_id": "evt_c8eeb2561cb07df2", "occurred_at": "2026-09-07T13:05:17Z", "published_at": "2026-09-07T13:05:17Z", "first_seen_at": "2026-09-07T17:49:59.195236Z", "time_precision": "published", "update_type": "confirmation", "material_change": true, "title_zh": "凭空创建的代币可能解释了 3.2 亿美元比特币如何离开 Liquid 侧链", "title_en": "Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain", "what_changed_zh": "研究人员怀疑Liquid侧链中的验证缓存缺陷允许无支持的L-BTC兑换为真实BTC，提供了更具体的攻击机制解释，包括缓存键碰撞让无效交易绕过range-proof检查，并报告了节点分裂的可能原因。", "what_changed_en": "Researchers suspect a validation cache flaw in the Liquid sidechain allowed unbacked L-BTC to be redeemed for real Bitcoin, providing a more specific explanation of the attack mechanism, including a cache-key collision that let invalid transactions bypass range-proof checks, and reporting a possible node split.", "current_state_zh": "Liquid 网络仍暂停；白帽黑客尚未归还资金，大部分BTC仍在控制中；攻击机制已进一步明确，涉及验证缓存缺陷和节点分裂，但尚未有官方确认的补丁或资金归还。", "current_state_en": "Liquid Network remains paused; white-hat hackers have not yet returned funds, with most BTC still under their control; the attack mechanism is now further clarified involving a validation cache flaw and node split, but no official patch or return of funds has been confirmed.", "detailed_summary_zh": "Researchers suspect a validation cache flaw in the Liquid sidechain allowed unbacked L-BTC to be redeemed for real Bitcoin, potentially explaining the $320 million loss.", "detailed_summary_en": "Researchers suspect a validation cache flaw in the Liquid sidechain allowed unbacked L-BTC to be redeemed for real Bitcoin, potentially explaining the $320 million loss.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 8.5, "references": [], "confidence": 0.95, "story_ids": [ "rss:cryptoslate.com_feed_:cc33351408a5953b" ], "sources": [ { "url": "https://cryptoslate.com/tokens-created-out-of-thin-air-may-explain-how-320-million-in-bitcoin-left-a-sidechain/", "label": "CryptoSlate", "source_type": "rss", "official": false } ] }, { "update_id": "upd_51999ea55e828ae8", "event_id": "evt_c8eeb2561cb07df2", "occurred_at": "2026-09-07T16:06:06Z", "published_at": "2026-09-07T16:06:06Z", "first_seen_at": "2026-09-07T17:49:58.342722Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "Liquid 攻击者广播归还 3,400 枚 BTC，保留 598 枚", "title_en": "Liquid Attacker Broadcasts Return Of 3,400 BTC, Keeps 598", "what_changed_zh": "攻击者广播了一笔交易，将3,400 BTC返还给Liquid联邦钱包，同时保留598.50 BTC；该交易尚未确认且标记为可替换，双方均未公开关于此次分拆的说明。", "what_changed_en": "The attacker broadcast a transaction returning 3,400 BTC to the Liquid federation wallet while keeping 598.50 BTC; the transaction is unconfirmed and flagged as replaceable, and neither side has published anything about the split.", "current_state_zh": "Liquid网络仍暂停；攻击者已广播返还3,400 BTC的交易，但保留598.50 BTC，交易尚未确认且可替换，资金仍未归还，事件状态持续监控中。", "current_state_en": "The Liquid Network remains paused; the attacker has broadcast a transaction returning 3,400 BTC while keeping 598.50 BTC, but the transaction is unconfirmed and flagged as replaceable, so funds have not yet been returned; the situation remains under monitoring.", "detailed_summary_zh": "The Liquid attacker has broadcast a transaction returning 3,400 BTC to the exchange's federation wallet while keeping 598.50 BTC, though the transaction remains unconfirmed and flagged as replaceable.", "detailed_summary_en": "The Liquid attacker has broadcast a transaction returning 3,400 BTC to the exchange's federation wallet while keeping 598.50 BTC, though the transaction remains unconfirmed and flagged as replaceable.", "background_zh": "Liquid Network 是 Blockstream 开发的比特币侧链。用户存入由联盟（federation）控制的多签钱包中的 BTC，用于发行该侧链的原生资产 L-BTC。联盟成员轮流提出并签署新区块，同时管理双向比特币锚定和存储在联盟钱包中的比特币。所谓可替换交易是指启用了 opt-in RBF，在交易确认前可被另一笔冲突交易替换。", "background_en": "Liquid Network is a Bitcoin sidechain developed by Blockstream. BTC deposited into a federation-controlled multisig wallet is used to issue L-BTC, the native asset on the sidechain. The federation's members take turns proposing and signing new blocks, and they manage the two-way Bitcoin peg and the bitcoin held in the federation wallet. A replaceable transaction uses opt-in RBF, which allows it to be replaced by another conflicting transaction until it is confirmed.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "如果这笔返还交易得到确认，将能恢复支撑 L-BTC 的大部分被盗 BTC，降低 Liquid 锚定出现缺口的风险，从而有助于增强对比特币侧链和联邦托管模式的信心。由于交易尚未确认且可被替换，不确定性依然存在，因此当前市场影响更多局限于 Liquid 侧链和 Blockstream 相关的情绪层面，而非直接波及现货市场资金流动。", "market_impact_en": "The restitution transaction, if confirmed, would restore most of the stolen BTC backing L-BTC and reduce the risk of a shortfall in Liquid's peg, which supports confidence in Bitcoin sidechains and federated custody more broadly. Because the transaction is unconfirmed and replaceable, uncertainty remains, so market impact is currently limited to sentiment around the Liquid sidechain and Blockstream rather than direct spot-market flows.", "importance_score": 8.5, "references": [ { "url": "https://help.blockstream.com/liquid-network/faqs/what-is-the-liquid-federation", "title": "Blockstream Help Center | What is the Liquid Federation?" }, { "url": "https://en.bitcoin.it/wiki/Transaction_replacement", "title": "Transaction replacement - Bitcoin Wiki" } ], "confidence": 0.95, "story_ids": [ "rss:thedefiant.io_api_feed:8f1088304a7f689f", "rss:www.theblock.co_rss.xml:64fcd3fd83985445", "rss:www.coindesk.com_arc_outboundfeeds_rss_:caec230ba8e5f1ca" ], "sources": [ { "url": "https://thedefiant.io/news/security/liquid-attacker-broadcasts-return-of-3400-btc-keeps-598", "label": "The Defiant", "source_type": "rss", "official": false }, { "url": "https://www.theblock.co/news/defi/2026-09-07-liquid-network-attacker-says-they-will-return-most-of-4000-btc-after-bug-fix-413673", "label": "The Block", "source_type": "rss", "official": false }, { "url": "https://www.coindesk.com/markets/2026/09/08/white-hat-hackers-return-most-of-usd320m-bitcoin-taken-from-liquid-network", "label": "CoinDesk", "source_type": "rss", "official": false } ] }, { "update_id": "upd_3f6427321465f82d", "event_id": "evt_c8eeb2561cb07df2", "occurred_at": "2026-09-08T11:10:30Z", "published_at": "2026-09-08T11:10:30Z", "first_seen_at": "2026-09-08T16:47:13.470928Z", "time_precision": "published", "update_type": "confirmation", "material_change": true, "title_zh": "Liquid 追回 3,400 枚 BTC，黑客在将 4,700 万美元比特币收入囊中后问“这样可以吗？”", "title_en": "Liquid recovers 3,400 BTC as hacker asks “is that ok?” after pocketing $47 million in Bitcoin", "what_changed_zh": "确认了攻击者广播的归还交易已在区块965950中于16:09:25 UTC得到确认，实际返还3,400 BTC至联邦钱包，黑客保留598.5 BTC（约合4700万美元），并在链上留言询问是否可接受。Blockstream状态页面仍显示活动事件和公共桥接节点中断，完整的L-BTC支持和赎回通道尚未恢复。", "what_changed_en": "Confirmed that the attacker's broadcast return transaction was confirmed in block 965950 at 16:09:25 UTC, actually returning 3,400 BTC to the federation wallet, while the hacker retained approximately 598.5 BTC (~$47 million), with an on-chain message asking 'is that ok.' Blockstream's status page still lists an active incident and major outage affecting public bridge nodes; full L-BTC backing and redemption access are not yet restored.", "current_state_zh": "Liquid网络仍处于暂停状态，部分资金（3,400 BTC）已确认归还至联邦钱包，但攻击者仍保有598.5 BTC，赎回通道未开放，Blockstream状态页面显示事件持续，资金支持和恢复仍有待确认。", "current_state_en": "The Liquid Network remains paused; 3,400 BTC have been confirmed returned to the federation wallet, but the attacker retains approximately 598.5 BTC; redemption access is not restored, Blockstream's status page shows the incident continuing, and full backing and recovery remain unconfirmed.", "detailed_summary_zh": "Liquid sidechain recovers 3,400 BTC after a $47 million reserve drain, but full backing and redemption access remain uncertain.", "detailed_summary_en": "Liquid sidechain recovers 3,400 BTC after a $47 million reserve drain, but full backing and redemption access remain uncertain.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 8.5, "references": [], "confidence": 1.0, "story_ids": [ "rss:cryptoslate.com_feed_:62576320db607dfb" ], "sources": [ { "url": "https://cryptoslate.com/liquid-recovers-3400-btc-as-hacker-asks-is-that-ok-after-pocketing-47-million-in-bitcoin/", "label": "CryptoSlate", "source_type": "rss", "official": false } ] } ] }