A White Hat With a Hostage: The Final 600 BTC of the Liquid Hack

The group that drained nearly every bitcoin out of Blockstream's Liquid sidechain now wants to be paid for giving most of it back. On September 6 they pulled about 4,000 bitcoin—roughly $320 million, the single biggest crypto theft of 2026—out of the network's reserve wallet. The next day they returned 3,400 of it, about 85%, and kept the rest. Now they want a 10% bounty for the final 598.5 BTC, and they have threatened that holders could take a 15% loss if Blockstream refuses. Named "white hats," they are also holding bitcoin ransom.

Before you file this under "another crypto hack, crypto is broken," notice what did not break. Bitcoin itself is fine. The network that failed is Liquid, a separate layer built on top of it, and the distinction is the whole story. Where your money sits matters more than what the money is.

The bridge is the fragile part

Liquid is a Bitcoin sidechain launched by Blockstream in 2018, used by exchanges as a settlement layer—a fast, confidential way to shuffle value between desks before settling on the slower main chain. It is not trustless. A federation of operators holds real bitcoin in a reserve wallet, and that bitcoin backs a token, L-BTC, which moves around the sidechain. Every L-BTC is supposed to be a claim on a bitcoin sitting in that wallet.

The attackers found the seam where the claim is minted. Liquid runs on software called Elements, which uses cryptographic range proofs to stop anyone from creating L-BTC out of thin air. To save compute, the software cached successful verification checks. A bug in how those cached results were identified let the attackers submit different, invalid data that pointed at a previously approved cached result, so nodes never re-verified it. That is how they minted unbacked L-BTC, then used the normal peg-out process to trade those tokens for real bitcoin from the reserve.

Think of it as a bridge plus an accountant. The bridge let value cross between Liquid and the main Bitcoin chain; the accountant decided whether there was real bitcoin behind each receipt. The attacker forged receipts, the accountant approved them, and the bridge dutifully paid out. Roughly 4,000 of the 4,200 bitcoin in reserve—about 95% of it—walked out before anyone noticed.

This is the accounting entry that matters: Liquid holds real BTC to back L-BTC. When the attacker pegged out 4,000 coins, the reserve fell to ~200 coins against L-BTC still outstanding. The whole token system was, briefly, a promise backed by almost nothing.

The final 600 BTC is not a bug bounty

Here is where the label starts to do heavy lifting. A genuine white hat finds a hole, reports it privately, and takes a modest, agreed bounty. This group drained ~95% of a federation reserve, returned most of it, and is now holding the final 598.5 BTC—worth about $47 million at recent prices—as the thing the negotiation turns on. They are demanding a 10% bounty (~$4.7 million) be paid by Blockstream out of its own funds, claiming the company spent only $1.5 million, or "0," on security for assets they describe as worth billions. Refuse, they say, and "all your holders a 15% loss".

At some point between "return the funds once it's patched" and "pay me a tenth or holders lose 15%," the white hat turns into someone holding leverage. Ledger's CTO made the point bluntly: if the residual ~600 BTC is a negotiated reward reached through encrypted messages, that is not disclosure, that is extortion. The 10% bounty is a bill presented after the fact, with the payment terms set by the party holding the hostage.

There are also two competing explanations for that residual amount, and they matter for what happens next. Blockstream-linked figures describe the 598.5 BTC as "change" left over from the return transaction, a leftover that simply sits there. The attackers describe it as the leverage for their bounty. One is an accounting artifact; the other is a price. The network is still paused, so no one can test which is true by turning L-BTC back into bitcoin right now.

Who is forced to move

The burden has landed on two groups, and only one had any say in it. L-BTC holders—and anyone holding an asset pegged into Liquid, like USDT issued on the sidechain—are frozen. The federation paused the network the day of the exploit, and holders cannot convert their L-BTC back into bitcoin until it restarts. Their capital is not gone; it is locked inside a system that just saw 95% of its reserves walk out the door and whose operators are negotiating with the people who took it.

The federation members are the ones with a decision to make: accept the 10% bounty to unlock the last 600 BTC, or refuse and eat the threatened 15% holder loss. That is the crux of the standoff. Blockstream says it has deployed patched software and is preparing a coordinated restart, but paying a ransom-bounty out of a federation's own pocket is a governance call that does not have an obvious answer.

What this means for your money

The cleanest take for a retail investor is about where risk actually lives, not what happened to "crypto." Bitcoin's base layer—the part with the math and the miners and the 21 million cap—did not fail, and you can see that in the price. Bitcoin is trading near $77,000, down only about 1.4% on the day, a shrug relative to a $320 million theft that was the year's biggest. The market correctly priced this as a local event: the trusted federation layer broke, not the underlying asset.

The assets that were at real risk are the ones that required a trusted middleman to hold value for you—L-BTC, bridged tokens, anything parked in a sidechain's custody. That is the "not your keys" risk descending one level down the stack. A chain that holds your coins in a federation reserve is only as safe as the people and the code operating the bridge, and this incident shows the bridge is where the seams are.

At under $50 million worth of bitcoin still outstanding, this is a small chapter even in its own drama. The reason to care is the general lesson, not the specific number: when you hold an asset backed by a promise that a middle layer, software, and a handful of operators will honor it, you have not removed the counterparty—you have just moved it, and you found out who it is only when it was too late to act. Blockstream will likely get the network restarted and most of the value back. The 600 BTC was always the tell: a real white hat does not have to threaten to finish the job they never started.