CSIDB logo
Incident

Liquid Network

Incident posture

Attack window
Sep 2026
Location
Canada
Status
Ongoing
CIA posture
Available to members
Updated
2026-09-15 15:14

Linked entities

Victim
Liquid Network
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Undetermined
Discovered
Undetermined
Disclosed
Sep 2026
Resolved
Pending

Summary

Liquid Network reported that a white hat hacker exploited a bug to withdraw thousands of bitcoins worth about $340 million from its wallet, prompting the platform to pause operations. The hacker said they would return the funds if the vulnerability was fixed, and after Blockstream patched the flaw, roughly 3,400 of the approximately 4,000 stolen bitcoins were returned, leaving about 600 bitcoins valued at around $47 million still under the hacker’s control. Operations remain halted while additional fixes and security improvements are implemented before restarting.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

0 techniques

Description

A hacker stole thousands of bitcoins worth about $340 million in a heist at a settlement exchange used by several cryptocurrency exchanges, representing one of the largest known thefts of crypto this year. Liquid Network, which was launched in 2018 by the crypto firm Blockstream, announced in a post on X on Sunday that a “white hat” hacker had taken the funds from the network’s wallet. The company said it had paused operations while the incident was being resolved. The theft was described as one of the biggest digital‑fund heists to date.

Although the identity of the hacker remains unknown, crypto media reports indicate that the attacker allegedly exploited a bug to withdraw the funds. The hacker reportedly stated that they would return the stolen bitcoins if Blockstream fixed the vulnerability. This condition was communicated publicly after the theft was discovered.

Former Blockstream executive Samson Mow later posted on X on Monday that the bug had been fixed and that approximately 3,400 of the roughly 4,000 stolen bitcoins had been returned, leaving about 600 bitcoins, valued at around $47 million, still under the hacker’s control. Mow said that operations would stay paused until additional fixes and security improvements were implemented before restarting. The incident is ranked among the largest heists of digital funds according to the Rekt leaderboard, which tracks cryptocurrency thefts.

Sources

Sources available to members: 1 source.

CSIDB