Crypto exchange suffers major theft, hacker returns bulk of stolen funds
A hacker exploited a bug to steal about $340 million in bitcoin from Liquid Network, a settlement exchange. The hacker agreed to return funds if the bug was fixed, and Blockstream fixed it, with most funds returned. Operations remain paused pending security improvements.
The incident targeted Liquid Network, a settlement layer established in 2018 by Blockstream that facilitates transactions for multiple crypto exchanges. The attacker reportedly exploited a specific vulnerability to drain roughly 4,000 bitcoins from the platform's wallet.
Following the theft, the hacker agreed to return the funds contingent upon a patch. Blockstream implemented the fix, resulting in the return of about 3,400 bitcoins, while roughly 600 remain unreturned. The exchange remains offline to implement further security hardening before resuming services.
This event could affect confidence in cross-exchange settlement infrastructure, as it highlights the risks of relying on centralized intermediaries even within decentralized ecosystems. Users and partner exchanges may face temporary liquidity constraints or heightened scrutiny of security protocols. The partial recovery, however, may demonstrate that coordinated vulnerability disclosure and remediation can mitigate financial damage, potentially encouraging more responsible disclosure practices among malicious actors. Ultimately, the incident could accelerate industry-wide adoption of stricter auditing and bug bounty programs.