Liquid Network pauses operations after claimed $320M Bitcoin white-hat withdrawal
Liquid Network halted transaction processing after an unusual withdrawal of approximately $320 million in BTC from multisig reserve addresses. The entity behind the withdrawal claimed a white-hat rescue linked to a suspected security flaw. Bitcoin mainnet continued operating normally, which confines the incident to Liquid, Blockstream’s federated sidechain.
TL;DR
- Liquid paused operations following a purported $320 million BTC withdrawal from reserve multisig addresses.
- The transacting party stated white-hat intent pending confirmation.
- Bitcoin mainnet remained unaffected: blocks and transfers proceeded as normal.
Scope and Impact
The pause affects Liquid, a Bitcoin sidechain that provides faster settlement, confidential transactions, and asset issuance. Liquid uses a federation and multisig bridge model instead of Bitcoin’s proof-of-work for settlement. A suspected multisig issue prompted operators to halt processing to assess risk and verify fund safety.
Incident Outline
Engineers are reviewing a large withdrawal from Liquid’s reserve addresses. The involved party publicly framed the move as a protective action to mitigate a potential flaw. Operators paused the network to investigate the trigger, confirm the claim, and validate the security of the bridge and reserves.
White-Hat Claim: Verification Required
A white-hat claim indicates protective intent but requires corroboration. Until operators publish findings, funds should not be labeled as stolen or safe with certainty. The status remains: unusual withdrawal, white-hat assertion, investigation in progress.
User Implications
Exchanges, traders, issuers, and wallet users relying on Liquid face temporary disruption and uncertainty. Confidence depends on the integrity of the federation, multisig configuration, and incident response. Clarity on the bridge’s security model is central for users who choose Bitcoin-linked liquidity with added features.
Bitcoin Mainnet Unaffected
Bitcoin’s base layer did not halt: mining, block production, and on-chain BTC transfers continued. The issue is isolated to Liquid’s sidechain infrastructure and governance.
Next Steps
The next authoritative update should come from Liquid or Blockstream operators: trigger details, validation of the white-hat claim, any risk to funds, the specific security issue, and a timeline for resuming operations. A full technical report is necessary for closure. Until then, treat this as an active sidechain security incident with limited confirmed facts.
