Whitehat Hacker Holds $320M in Drained Liquid Network Bitcoin to Force Security Patch

Key Facts

1A whitehat hacker is holding $320 million in drained Bitcoin from the Liquid Network until developers prove they have patched the fatal flaw.

2SideSwap stated that the bug allowed for the creation of L-BTC which passed valid authorization while bridge nodes were paused.

Amid rising security concerns within Bitcoin Layer-2 solutions, a whitehat hacker has claimed responsibility for holding $320 million in drained Bitcoin from the Liquid Network. According to reports, the hacker intends to hold these funds as leverage until developers can demonstrably prove they have patched a fatal security flaw. This incident underscores the ongoing vulnerabilities inherent in cross-chain bridging protocols.

SideSwap stated that the exploit involved a bug allowing the unauthorized creation of L-BTC, which bypassed standard authorization checks while bridge nodes were paused. Per analyst assessments, while the whitehat's involvement mitigates the immediate risk of total fund loss, it confirms a massive technical failure within a major Bitcoin sidechain infrastructure.

As of September 7, 2026, authoritative price data for the involved instruments is unavailable, and the market remains focused on the technical response from Blockstream and Liquid Network. With no specific upcoming calendar catalysts for this sector, the primary factor to watch is a formal verification of the security patch to restore confidence in L-BTC stability.