A major security incident has hit the cryptocurrency industry after nearly 4,000 Bitcoin worth approximately $320 million was withdrawn from the federation wallet backing the Bitcoin-based Liquid Network.
The network confirmed the incident on Sunday, September 6, saying that actors described as “purported white-hat hackers” withdrew around 4,000 of the approximately 4,200 Bitcoin held in the Liquid Federation wallet.
The incident has forced Liquid Network to halt new transactions, while users and cryptocurrency platforms assess the potential impact on wallets, deposits and withdrawals.
Nearly 95% of Federation Bitcoin Reserves Removed
The scale of the incident is particularly striking.
According to Liquid Network’s public statements and reporting by Reuters, the withdrawal involved roughly 4,000 Bitcoin from a wallet that previously held around 4,200 Bitcoin.
That means the withdrawn funds represented the overwhelming majority of the federation’s Bitcoin reserves.
The network said the individuals behind the withdrawals claimed to be white-hat hackers — a term generally used to describe security researchers who identify and exploit vulnerabilities with the stated intention of exposing security flaws rather than permanently stealing funds.
However, the claim has not been independently verified.
As of the latest reports, the key question remains unanswered: Will the Bitcoin be returned?
Liquid Network Halts Transactions After Security Breach
Liquid Network said it had halted new transactions following the incident and warned that Liquid wallets could be affected.
Other reports, including coverage from The Block and Bitcoin Magazine, said bridge operations were disabled and exchanges began suspending activities involving L-BTC while the situation was investigated.
L-BTC is the Bitcoin-linked asset used on the Liquid Network.
The security incident did not involve a hack of Bitcoin’s main blockchain.
Instead, the problem affected Liquid, a separate Bitcoin-based sidechain and settlement network that uses a federation-based system to manage Bitcoin transfers between the Bitcoin blockchain and the Liquid ecosystem.
That distinction is important for Bitcoin holders: Bitcoin’s base-layer blockchain was not reported as compromised.
What Is the Liquid Network?
The Liquid Network is a Bitcoin-based settlement network developed by Blockstream.
It was designed to help exchanges, traders and institutions move Bitcoin and other digital assets more quickly and privately than they might be able to on Bitcoin’s main blockchain.
Unlike Bitcoin’s decentralized proof-of-work system, Liquid relies on a federation of participants to help manage certain operations, including the process of moving Bitcoin into and out of the network.
Users can move Bitcoin into Liquid and receive L-BTC, a corresponding asset used inside the Liquid ecosystem.
The security incident has now placed renewed attention on the risks surrounding federated blockchain systems and cross-chain asset transfers.
‘White Hat’ Claim Raises More Questions
One of the most unusual aspects of the incident is the claim made by those responsible for the withdrawal.
Reports indicate that the actors left an on-chain message identifying themselves as “white hats.”
But cybersecurity experts and cryptocurrency users are likely to judge that claim based on what happens next.
A genuine white-hat operation typically involves demonstrating a vulnerability and working toward the secure return or protection of affected funds.
Until the Bitcoin is returned or a verified agreement is reached, the status of the $320 million remains one of the biggest unanswered questions surrounding the incident.
Reuters reported that the withdrawals involved transactions through SideSwap, a platform authorized to facilitate peg-out transactions. Liquid Network also indicated that the cryptographic key used for the transactions was not itself compromised.
Exchanges Suspend L-BTC Activity
The fallout quickly spread beyond the Liquid Network itself.
The Block reported that the Bitcoin sidechain was paused and that exchanges suspended L-BTC deposits and withdrawals as Blockstream and other parties worked to investigate the incident and establish contact with those behind it.
Bitcoin Magazine also reported that bridge nodes were disabled and the sidechain was paused, while other assets issued on Liquid were reported as not directly affected by the incident.
This has intensified concerns among users who rely on blockchain bridges and sidechains to move assets between different networks.
Was Bitcoin Itself Hacked?
No — based on the information currently available, Bitcoin’s main blockchain was not hacked.
The incident involved the Liquid Network and its federation-controlled infrastructure, rather than Bitcoin’s core blockchain or proof-of-work consensus mechanism.
That distinction is critical.
Bitcoin continues to operate independently, while the investigation focuses on how nearly 4,000 BTC could be withdrawn from reserves connected to the Liquid Federation.
Still, the incident could have broader implications for the cryptocurrency industry.
The breach highlights a long-standing risk in digital asset infrastructure: even when a major blockchain remains secure, platforms, bridges, sidechains, wallets and other connected systems can create additional points of vulnerability.
What Happens to the $320 Million Now?
The next stage of the story could determine whether this incident is ultimately remembered as a devastating crypto theft or an extraordinary security operation.
Several major questions remain:
- Will the nearly 4,000 Bitcoin be returned?
- Can the people claiming to be white-hat hackers prove their identity and intentions?
- How did the withdrawal mechanism allow such a massive amount of Bitcoin to leave?
- Will Liquid Network users suffer financial losses?
- How long will transactions and L-BTC services remain disrupted?
- Could the incident lead to changes in how federated Bitcoin networks manage reserves?
The answers could have consequences far beyond Liquid Network.
With approximately $320 million involved, the incident has become one of the cryptocurrency industry’s biggest security stories of the moment.
For now, Liquid Network users, exchanges and investors are waiting for one crucial development:
The people who moved the Bitcoin say they are the good guys. The crypto world is now waiting to see if they give the $320 million back.
WWC ONE MEDIA J.M.S

Leave a Reply