The Liquid Network has successfully restored its Bitcoin reserves to 100% capacity, marking a major milestone just two months after self-described white-hat hackers drained a vast majority of the sidechain’s funds. The Liquid Federation announced on Monday that full 1:1 Bitcoin backing has been officially reestablished for all LBTC, the native derivative token that represents Bitcoin on the Liquid sidechain.
This accomplishment comes a few weeks after participating providers successfully restored swaps between BTC and LBTC at the vital 1:1 rate, allowing users to move seamlessly between the two assets once again. Blockstream CEO Adam Back, whose company originally developed the foundational technology driving the Liquid Network, shared a screenshot of the network’s live dashboard on social media. The dashboard confirmed that assets perfectly matched liabilities at a 100% ratio, leaving a reserve deficit of precisely 0.00 BTC.
The federation emphasized that transparency remains a core tenet of the recovery, noting that users who run their own Liquid nodes can independently verify the network’s reserves directly on the blockchain. However, the federation did not publicly disclose the precise mechanism or financial sources used to cover the substantial shortfall left in the wake of the September exploit.
Launched back in 2018 by Blockstream, the Liquid Network functions as a prominent Bitcoin sidechain—a distinct, interoperable blockchain that operates alongside the main Bitcoin network to facilitate faster, highly confidential transactions and institutional-grade trading. Within the Liquid ecosystem, users lock up their native BTC in a secure multi-signature wallet controlled by the Liquid Federation, a consortium of prominent cryptocurrency exchanges, trading desks, and industry-leading financial companies that collectively maintain and operate the sidechain nodes. In return for the locked assets, users receive an equivalent amount of LBTC, which can be utilized across the sidechain for high-speed transfers.
When asked by community members on X about the preventative measures implemented to ensure a security breach of this magnitude cannot happen again, Back outlined three hardened lines of defense. According to the Blockstream executive, the federation has refreshed its peg-out authorization keys, which are now securely held in cold hardware wallets. Additionally, engineers have disabled proof validation caches alongside deploying a critical bug fix for network nodes, and core consensus rules have been explicitly hardened to "fail closed" under any anomalous conditions. Back also noted that the revised infrastructure has undergone rigorous third-party security audits.
"And lesson: treat with suspicion (don’t trust, verify) AI suggested fixes," Back wrote in his public commentary regarding the evolving landscape of software engineering and network security.
Back had previously addressed the growing role of artificial intelligence in code development and cybersecurity vulnerabilities during an interview with Bloomberg Television on October 20. Describing what
he characterized as "a wave of AI-assisted security analysis" that had emerged over the preceding couple of months, Back acknowledged the dual-use nature of the technology. He noted that while AI serves as a powerful tool to assist developers in writing and securing code, malicious actors can similarly leverage automated systems to discover latent defects and zero-day vulnerabilities, a trend that he said had impacted multiple companies across the broader digital asset sector. At the time of that interview, he stated that the investigation into the missing funds was ongoing.
Looking ahead, the Liquid Federation announced that it is actively modernizing Liquid’s overall governance structure. The overhaul is designed to introduce much clearer lines of responsibility and enhanced regulatory oversight, alongside the deployment of additional technical and operational safeguards. The federation stated that further detailed information regarding these structural improvements will be released to the public in the coming weeks.
The September Exploit
The path to full recovery has been arduous, tracing back to an alarming security incident on September 6. On that day, individuals purporting to be white-hat hackers withdrew approximately 4,000 BTC—valued at roughly $320 million at the time—from the primary Liquid federation wallet. The actors communicated their intentions and actions to Blockstream through PGP-signed cryptographic messages cleverly embedded directly into standard Bitcoin transactions.
The following day, the situation shifted when the actors returned 3,400 BTC, worth approximately $269 million, shortly after Blockstream announced that Liquid’s vulnerable bridge nodes had been successfully patched. However, the individuals retained roughly 598 BTC of the original haul. The retention of these funds drew sharp criticism from prominent industry figures, including Ledger CTO Charles Guillemet, who remarked that if the remaining coins were being withheld as a negotiated bounty or reward, the arrangement resembled extortion far more than ethical white-hat hacking.
Blockstream subsequently took a hardline stance against the remaining holders, refusing to pay any form of ransom to recover the outstanding Bitcoin. In an official statement released during the crisis, the company made its position crystal clear, stating that taking assets without explicit authorization and withholding their return constitutes a criminal act rather than responsible disclosure. Blockstream firmly maintained at the time that the withholding of the funds was not a white-hat activity, but rather straightforward theft.
Comments (0)