Liquid Network Bitcoin Hack: 85% of $320M Returned [2026]

A Bitcoin sidechain that banks and exchanges trust to move money quietly in the background just proved how much can go wrong when “quiet” also means “under-audited.” On September 6, 2026, an attacker walked out of Blockstream’s Liquid Network with roughly 4,000 BTC, worth about $320 million at the time, then gave most of it back two days later. The episode leaves behind a reconciliation problem, a $47 million hole, and a fresh argument about whether federated sidechains are still fit for purpose in 2026.

Liquid Network is a Bitcoin-based settlement layer launched by Blockstream in 2018, built so exchanges and institutions could move BTC and other assets faster and more privately than on the base Bitcoin chain. Its L-BTC token is supposed to be backed one-for-one by real Bitcoin sitting in a federation-controlled reserve. That reserve held close to 4,200 BTC before the attacker’s transaction landed. Afterward, it held closer to 200.

What Happened at Liquid Network on September 6

Liquid Network confirmed the incident on Sunday, September 6, posting that “purported white-hat hackers” had withdrawn roughly 4,000 BTC from the federation wallet backing L-BTC, worth about $320 million at the time, according to CoinDesk’s reporting on the exploit. Bitcoin Magazine put the precise transaction size at 4,019.4 BTC, pulled from a single peg-out. Other outlets landed closer to 3,996 BTC, a gap that traces back to which specific transactions each report counted rather than a second, separate theft.