Liquid

Liquid operates as a cryptocurrency exchange that facilitates the buying, selling, and trading of a wide range of digital assets. The platform provides fiat‑on‑ramp and off‑ramp services, allowing users to deposit and withdraw traditional currencies alongside crypto holdings. In addition to spot trading, Liquid offers an Earn program where users can allocate funds to generate yields on selected tokens. The exchange maintains both warm wallets for active trading and cold storage for the majority of user funds, moving assets between them as needed for security. Its headquarters are located in Japan, positioning it within one of the world’s major financial hubs for cryptocurrency activity. Liquid serves an international user base while adhering to the regulatory framework applicable in its home jurisdiction.

The exchange has experienced notable security incidents that have shaped its operational practices. In August 2021, attackers compromised Liquid’s warm wallets, resulting in the theft of over $90 million across sixty‑nine different cryptocurrency assets, including a substantial amount of Ethereum tokens that were subsequently laundered through decentralized exchanges. Following the breach, Liquid suspended crypto deposits and withdrawals, kept fiat services running, transferred remaining funds to cold storage, and launched an investigation into the attack vector. A prior incident in November 2020 saw threat actors hijack the exchange’s DNS provider via social engineering, redirecting employee traffic to fraudulent login pages to harvest credentials and exfiltrate personal user data such as names, addresses, emails and encrypted passwords. Although no funds were taken in the 2020 event, the company warned of possible exposure of identity verification documents and advised users to reset credentials. These episodes have underscored the importance of robust wallet segregation, continuous monitoring, and strong authentication mechanisms for Liquid’s security posture.