
Liquid Network returned 3400 BTC after the incident, and another roughly 598.5 BTC remain on a linked address. This happened after Blockstream announced a fix in the bridge nodes. The question remains simple: the network has already seen the money, but operations have not yet been restored.
According to the source, the returned coins were valued at approximately $268 million. The unrecovered balance is worth another roughly $47 million. The initial withdrawal was about 4000 BTC, or approximately $320 million. This is not a minor technical story.
What happened to Liquid Network?
The incident began on September 6, 2026. At that time, about 4000 BTC were withdrawn from the Liquid Network federation reserve. The project team said access was obtained through the SideSwap PAK mechanism. That is what set the whole story in motion.
Later, SideSwap reported that the L-BTC peg-outs appeared because of a bug in Elements. In other words, this was not only a theft, but also a failure in bridge logic. What matters here is not just the amount, but also the way the coins left the network.
According to 1delta, the original transaction contained 83 inputs, 13 outputs, and 4019.44426085 BTC. It was included in block 965,783 at 14:28:56 UTC. The fee was only 0.00034097 BTC. The numbers speak for themselves.
Why is the return of 3400 BTC important?
The return of 3400 BTC means the federation has already recovered about 85% of the coins controlled by the other side. But this is not the end. About 598.5 BTC still remain on the linked address.
At the current BTC price of $78,713, this balance is valued at approximately $47.11 million. The returned 3400 BTC are worth about $267.62 million. The difference is significant. And it clearly shows the scale of the incident.
Blockstream said the bridge nodes have already been fixed. The federation is now preparing Liquid Network for a coordinated restart.
In other words, the money has been returned, but the network is still down. This matters for everyone who used L-BTC or follows bridges between blockchains. After stories like this, trust is restored slowly. Very slowly.
Market reaction and technical details
The public side of this story looks unusual. The party holding the coins called itself “ethical hackers” and sent Blockstream on-chain messages. After that, Blockstream also sent a signed PGP message confirming that the funds could be safely returned.
There is another nuance. According to 1delta's reconstruction, each of the 83 inputs had 11 DER signatures under the OP_11 script. This looks like a standard 11-of-15 quorum, not an obvious private key compromise. That is why the story went beyond a typical theft.
Just before the return, there was also an interception attempt. In block 965,945, a third-party sender impersonated the recipient and asked for the coins to be sent to another address. About 30 minutes later, the funds were still sent to the correct federation address.
3400 BTC have already been returned to the federation.
Another 598.5 BTC remain on a linked address.
The initial withdrawal was about 4000 BTC.
The initial withdrawal was valued at about $320 million.
Liquid Network is still not operating normally.
What does this mean for investors?
For BTC holders, this news is not about price, but about infrastructure. Bridges, federations, and sidechains often seem invisible until something breaks. Then it becomes clear that one mistake can stop the entire system.
The Liquid story is another reminder of a simple fact. When a network relies on a quorum and bridge nodes, security depends not on one key, but on the discipline of all participants. That is why Blockstream is now talking about additional security hardening. For the market, that matters more than the short-term noise around the BTC amount.
This is also a useful signal for Ukrainian users who work with BTC through different networks. If assets move through a bridge or a separate federation, it is worth paying closer attention to the state of the infrastructure itself. Not just the exchange rate. If you need to quickly sell Bitcoin on Monobank, you can do it without extra steps.
Frequently asked questions
How much BTC was returned after the Liquid Network incident?
3400 BTC were returned. That is about 85% of the coins controlled by the other side. Another roughly 598.5 BTC still remain on the linked address. The amount is still large.
Why is Liquid Network still not working?
Blockstream said the bridge nodes were fixed, but the federation is still preparing a coordinated restart. In other words, the problem has been partially resolved, but the network has not yet been turned back on.
Is it known when Liquid Network will resume operations?
No. The team has not yet announced a timeline for full restoration. It is only known that the updated software has already been deployed.
Liquid Network has returned most of the funds, but the trust issue is still not closed. For everyone following BTC infrastructure, this is a good reminder: you need to watch not only the price, but also how the coins actually move.
This material is not financial advice. Cryptocurrency trading involves significant risks. Part of this text was prepared with the help of artificial intelligence based on public sources and reviewed by our editorial team.