Liquid Network Hack

On September 6–7, 2026, Bitcoin sidechain Liquid Network suffered an Elements consensus bug exploit resulting in losses of ~4,000 BTC (~$320 million USD), after unbacked L-BTC tokens were minted and redeemed for real Bitcoin, forcing operators to halt the network while whitehat negotiations proceed on-chain.

The attacker exploited a consensus vulnerability in the underlying Elements software to forge ~4,000 unbacked L-BTC on Liquid without depositing collateral. These unbacked tokens were submitted through SideSwap's Peg-out Authorization Key service, prompting the Liquid Federation multisig to release ~3,996 real BTC from reserves—draining ~95% of backing. Federation operators subsequently halted the sidechain and exchanges paused L-BTC deposits.

The attacker consolidated funds into a single Bitcoin address and left an OP_RETURN message offering to return most of the BTC once Blockstream deploys a network-wide patch.

Mainnet Attacker Address: bc1ql4mfu6aundtkksxklfajs2h3t9nzcd6gyqjlte

Federation Reserve Address: bc1qdlld6antmv4xug242ed83q7k4rqw50cwfns38szx4qu2f4jwaxxsuhwxxr