Blockstream Refuses to Pay the Liquid Hackers — and Leaves a $47 Million Hole in Its Bitcoin Peg

One weekend in early September, roughly 4,000 bitcoin — about $320 million — drained out of the treasury that backs L-BTC, the token at the center of Liquid, a Bitcoin sidechain run by Blockstream. In a single transaction that was close to 95% of everything backing the token. No private key was stolen. Days later, most of it came back: the drainers returned 3,400 of the coins. The unsettled part is the rest — about 598.5 bitcoin, near $47 million — and Blockstream's answer to it. The company now says it won't pay to get the missing coins back.

That decision matters beyond this one treasury, because it breaks with how the crypto industry has quietly learned to handle exactly this kind of event.

How money left without a key being stolen

Liquid works by letting you lock up real bitcoin on the main chain and receive an equal amount of L-BTC that moves faster and settles privately. That promise — 1:1 backing — is only as good as the bitcoin sitting in the federation treasury, a 15-key multisig wallet where 11 signatures are needed to move funds.

The attackers never touched the keys. They found a bug in Elements, the software Liquid runs on, in the part that verifies "confidential transactions." To save computing power, the code caches the result of a verification check; a flaw let new, invalid data masquerade as already-approved data. The result: the drainers minted roughly 4,000 L-BTC with no bitcoin behind them at all, then cashed those phantom tokens out through the normal peg-out process. Because the software vouched for the fake balance, 11 of the 15 signers approved the withdrawal. From mint to payout took about 36 minutes.

That's the piece that should stick with you. The multisig treasury was designed to guard against someone stealing the keys. It had no defense against the code itself being tricked into saying the money was real. Custody was secured. Trust was not.

The "white hat" ritual — and the refusal to play it

The drainers called themselves white hats, messaging via bitcoin's OP_RETURN field that they'd return the funds once the bug was patched. After Blockstream fixed it, they sent back 3,400 bitcoin (about 85%) — and kept the rest, demanding a 10% cut as a bounty, paid from Blockstream's own money. Their threat: refuse, and L-BTC holders eat roughly a 15% loss.

This is the emerging crypto custom the refusal breaks. When projects get drained, the "white hats" who return most of it are routinely allowed to keep a slice. Nomad, which lost $190 million in 2022, paid on that logic. Blockstream's stance instead aligns with the firms that pushed back — Kraken refused a similar demand after a $3 million theft in 2024 and called it extortion.

Blockstream went further, dropping the negotiating fiction entirely. "Taking assets without authorization and withholding their return is a crime, not responsible disclosure. It is not white-hat activity. It is theft," the company said, adding that "Bitcoin doesn't haircut users to pay a ransom." It says it will work with law enforcement, exchanges, and blockchain-forensics firms to trace and recover the coins, and that bitcoin's public ledger means the evidence doesn't disappear.

Who's on the hook for the $47 million

The question Blockstream hasn't answered is who absorbs the loss if the ~598.5 bitcoin never comes back. Redemptions of L-BTC remain suspended — you can't currently trade your L-BTC back for real bitcoin — and the implied backing shortfall is around 14%. The pieces have to land somewhere: Blockstream's own balance sheet (it's a private company, with no public stock to mark down but real capital behind it), the L-BTC holders via a de facto haircut, or law enforcement and tracing that never guarantee recovery. None of those outcomes is settled today, and that open tab is the honest uncertainty in this story.

What refusing to pay tells an investor

Put the scale in perspective before judging. This was 2026's largest crypto theft at the time, but it's a ~$47 million wound inside a bitcoin market cap north of $1.5 trillion. The base chain never blinked; your own bitcoin, held directly, was untouched. What broke was narrower and more instructive: a token that promised to be "backed by bitcoin" turned out to be backed by a promise operated by people — and the risk in that promise lived in the least-trusted line of custom validation software, not in the vault.

For anyone holding any 1:1-backed token, the question is never just who guards the keys. It's who wrote, audits, and can change the code that decides what's real — because no number of keys disciplines a bug that mints proof.

Verdict: Blockstream's refusal to pay is a principled bet against a ritual that rewards the people who caused the damage. It may well be the right call, but it is not a free one. It leaves a half-answered $47 million question sitting on top of the very promise — 1:1 backing — that is the entire reason L-BTC was worth holding.