Tools Crypto Exploit Tracker exploit-0132
Exploit record
Liquid reserve withdrawal and partial Bitcoin recovery
- Loss
- $320M
- Attack vector
- Software Bug
- Chain
- Liquid / Bitcoin
- Sector
- Bridge
What happened
Liquid acknowledged a roughly 4,000 BTC withdrawal, valued at about $320m at the time. SideSwap says the L-BTC used for the peg-out was created through an Elements bug. On 7 September, 3,400 BTC returned to the federation address; the return transaction sent 598.49955894 BTC back to the actor. The dollar figure here is the initial gross withdrawal estimate, before recovery.
The return confirmed at 16:09:25 UTC on 7 September in block 965,950. It restored roughly 85% of the approximately 4,000 BTC headline amount. A subsequent 8 September transaction retained 598.49988609 BTC in a large output at the actor’s address, after intervening small transfers. The actor’s white-hat description is self-asserted; the cited records establish the movement of coins, while terms for retaining them remain unconfirmed. Blockstream’s status page still listed an active public bridge incident when checked on 8 September. The Exploit Tracker’s $320m entry is gross incident value, not a $320m outstanding loss.
On-chain references
- 3,400 BTC returnmempool.space/tx/a6d697a25266ce3c78774fd1d75f896b7af522ada20…
- 8 September actor outputmempool.space/tx/1d690f3b96b878067f3a445b74dfb8fab4201c0455d…
Sources
- Liquid incident acknowledgementx.com/Liquid_BTC/status/2096696272447218108
- SideSwap incident statementx.com/side_swap/status/2096709838310928674
- Blockstream service statusstatus.blockstream.com/
On YFarmX
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026
