In one of the largest crypto thefts so far this year, a hacker stole nearly $340 million worth of Bitcoin from the Liquid Network, a settlement platform launched by Blockstream in 2018. The exchange, used by several cryptocurrency firms, confirmed the hack and immediately took operations offline to assess and address the damage.
Bug exploit leads to dramatic return
The intrusion appears to stem from a bug that allowed the thief to withdraw roughly 4,000 BTC. Soon after the theft, the hacker issued a sort of ultimatum: they would return the funds if Blockstream fixed the vulnerability. Blockstream rapidly patched the issue. By the next day, about 3,400 BTC—equivalent to most of the stolen $340 million—had been returned. That leaves around 600 BTC, or close to $47 million, still unrecovered and under the hacker’s control.
Response, implications, future security
Blockstream has not restarted Liquid Network’s operations yet. The company insists that more work is needed—not just to repair the specific bug, but to implement broader security improvements before going live again. Incident trackers list this as one of the year’s biggest crypto heists, underlining the high stakes involved in managing digital financial infrastructure.
This episode underscores two major trends in the crypto world. First, even major networks with high visibility are vulnerable to significant exploits. Second, the hacker’s decision to demand a fix in exchange for returning funds signals a shift: such attacks may increasingly blend elements of bug bounty ethics with black-hat operations. It’s a scenario that raises complex questions about deterrence, responsibility, and how crypto platforms should balance security with openness. Going forward, users and investors will want more than promises—they’ll demand transparency over fixes, audits, and clear paths to restoration when things go wrong.
