Blockstream's Liquid Network, a settlement layer used by cryptocurrency exchanges, halted new transactions on Monday after purported white-hat hackers withdrew roughly 4,000 of the 4,200 bitcoin held in its federation wallet. The move leaves the network's peg severely undercollateralized, with only about 200 BTC remaining to back all outstanding L-BTC.
What happened
The withdrawal was attributed to purported white-hat hackers, a term for security researchers who break into systems to expose vulnerabilities rather than steal funds. The exact method of the attack hasn't been disclosed, but the scale of the move — 4,000 of 4,200 BTC — suggests the federation's multisig controls were bypassed. Blockstream has not yet commented on the exploit.
📊 Market Data Snapshot
Why the halt matters
Liquid Network is a federated sidechain designed for fast, confidential settlements between exchanges. When the network halts new transactions, exchanges that rely on it for settlement face delays and potential liquidity crunches. The halt is a direct consequence of the withdrawal, but the bigger problem is what's left in the wallet.
With only 200 BTC remaining, the network's peg is now severely undercollateralized. L-BTC is supposed to be redeemable 1:1 for BTC. If the missing funds aren't recovered, L-BTC holders could face a run on the peg, and the value of their tokens could drop sharply.
The depeg risk
The undercollateralization is the immediate threat. Even if the white-hat hackers return the funds, the incident exposes a fundamental weakness in federated sidechains: the federation can unilaterally pause operations, and a single compromise can drain the reserve. This isn't a theoretical risk — it just happened.
For exchanges and users holding L-BTC, the next few days are critical. If Blockstream can negotiate a return of the funds quickly, the network may resume with enhanced security. If not, the peg could break, and the fallout could spread beyond Liquid to the broader sidechain ecosystem.
Blockstream is likely in talks with the purported white-hat hackers, a common step in such incidents. The network will remain halted until the situation is resolved. The broader market has shown little reaction so far, with Bitcoin's price barely moving — a sign that investors are treating this as an isolated event. But the undercollateralization is a reminder that sidechains carry their own risks, and the market's complacency may not last if the funds aren't recovered.
