Incident Overview
A significant incident has unfolded within the Liquid Network, following a breach that has left users temporarily unable to redeem their Liquid Bitcoin (LBTC) for Bitcoin (BTC). It has now been over a month since around 4,000 BTC was stolen when a group identifying themselves as white hat hackers exploited a flaw in the Elements software associated with the Liquid Network.
Recovery Efforts
To date, approximately 3,400 BTC has been recovered; however, 598.5 BTC remains with the attackers, who claim they are entitled to a bounty of 10% for their actions. Blockstream, the developer of the Liquid Network, has firmly denied this request and demanded the return of the remaining funds, but so far, there has been no compliance from the attackers.
User Impact
As a result of the heist, peg-out functionalities for Liquid users have been suspended while an in-depth security audit of Elements v23.3.4 is conducted. This situation has caused considerable frustration among users, many of whom are expressing their disappointment with Blockstream’s handling of the situation. One user lamented on social media platform X about the lack of clear communication and the ongoing difficulties, noting that 14% of the funds tied to individual holders are effectively unrecoverable due to the nature of the attack.
Ongoing Developments
The Liquid Network provided an update on September 29, announcing the ongoing security audit and the coordinated efforts to secure the system. They are also working to update the PAK list, which involves revising existing entries to enhance security protocols surrounding peg-out keys.
Alternative Solutions
While uncertainty remains regarding when peg-out operations will resume, some LBTC holders have opted to find alternative methods to recover their funds. Reports have surfaced of users utilizing different applications to swap their Liquid Bitcoin for Bitcoin, albeit at a cost that some have referred to as the “Not your keys, not your coins” tax, which can encompass high fees and extended transition periods due to liquidity issues. Despite the challenges, for some, the assurance of holding Bitcoin is worth the extra effort and expense involved in circumventing the ongoing issues within the Liquid Network.