Blockstream has not said whether its 11-of-15 federation was bypassed or complied. Until someone publishes what share of Liquid's reserves left on September 6, an L-BTC balance is an unverified claim.
Perspective Coverage
7 publishers
- Builder
- Builder 30%
- Operator
- Operator 40%
- Investor
- Investor 30%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+25
- Incentives60
- Confidence58
The attackers who drained 4,000 BTC from Liquid handed back 3,400 after the patch and kept 598.5. Blockstream puts about $47 million on that hold and says it will trace the coins instead of paying.
Perspective Coverage
7 publishers
- Builder
- Builder 24%
- Operator
- Operator 43%
- Investor
- Investor 33%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+10
- Incentives62
- Confidence68
Blockstream paused the Liquid bridge after roughly 4,000 BTC left the federation wallet, and the people holding it will send most of it back only once the flaw is fixed, which puts the patch timetable in their hands.
Perspective Coverage
7 publishers
- Builder
- Builder 26%
- Operator
- Operator 41%
- Investor
- Investor 33%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence70
Blockstream says none of the 15 federation keys were compromised, which is what makes the $320m peg-out worth studying: honest signers running buggy validation code approved it, and the reserve is still short.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+12
- Incentives45
- Confidence58
Blockstream pauses Liquid after $320 million exploit, tries to reach hackers onchain
The withdrawal cleared every control the Liquid Federation actually operates, which is why an 11-of-15 quorum released the bitcoin in 23 minutes. Recovery now depends on whoever holds the coins answering an email address.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+20
- Incentives55
- Confidence55
The 11-of-15 federation multisig held and no key was stolen; the node software that tells signers whether a peg-out is backed carried a week-old bug, and about $320m walked out of Blockstream's sidechain.
Perspective Coverage
5 publishers
- Builder
- Builder 27%
- Operator
- Operator 39%
- Investor
- Investor 34%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence60
The attacker's self-set 15% leaves Liquid's peg wallet about 600 BTC short
SlowMist says a cache key collision in Blockstream's Elements let an attacker mint 3,998.5 L-BTC and peg them out for real Bitcoin. About 3,400 BTC came back after the patch, leaving the pool near 3,597.
Reality
- Evidence58
- Adoption72
- Hype gap+20
- Incentives65
- Confidence55
A node bug made Liquid's 11-of-15 multisig pay out on coins that never existed
Blockstream's federation signers behaved correctly and still released roughly 4,000 bitcoin, because the software that decides what counts as a real L-BTC is a different system from the keys guarding the peg.
Reality
- Evidence58
- Adoption45
- Hype gap+12
- Incentives66
- Confidence55