Liquid Network Hack: $320M Bitcoin Sidechain Exploit [2026]

A Bitcoin sidechain that exchanges and traders treat as boring infrastructure just became the biggest crypto security story of the week. On September 6, 2026, roughly 4,000 BTC, worth about $320 million at the time, moved out of the federation wallet that backs Blockstream’s Liquid Network. The person or people who took it say they are white hats. Blockstream has not confirmed that, and as of this morning the coins have not been returned.

The withdrawal landed in Bitcoin block 965,783 at 14:28:56 UTC, sending roughly 3,996 BTC to a single bech32 address. Liquid, which had held about 4,200 BTC in reserves backing its Liquid Bitcoin (L-BTC) token, lost close to 95% of that backing in one transaction. The federation paused bridge nodes within hours, exchanges began cutting off L-BTC deposits and withdrawals, and Blockstream said it was trying to reach whoever holds the funds through an on-chain signed message. Nobody has named a bounty figure, and nobody has confirmed the attacker’s identity.

What actually happened to Liquid Network

Liquid Network is not a typical target. It is a federated Bitcoin sidechain launched by Blockstream in 2018, built for exchanges and institutions that want faster settlement and confidential asset issuance without touching the base Bitcoin chain for every transfer. Users lock BTC into the federation, receive L-BTC on the sidechain, trade or move it quickly, then peg back out to real BTC when they want it. That peg-out step is where this incident happened.