← News·Markets · Digital AssetsMarkets

Liquid Network halts as purported white hats pull 4,000 BTC from Blockstream sidechain over Elements flaw

$BTC is in focus as Blockstream's Liquid Network, a Bitcoin sidechain, halted operations after a group identifying themselves as white-hat researchers withdrew 4,000 BTC, or $320 million, from the network. The actors…

NM
NewsMV Markets Desk
3 min read
7 September 2026Markets desk
Share this dispatch

Key takeaways

  • Blockstream's Liquid Network, a Bitcoin sidechain, halted operations after a group identifying as white-hat researchers withdrew 4,000 BTC ($320 million) from the network.
  • The actors told Blockstream they would return most of the withdrawn funds only after a vulnerability in Elements, the software underlying Liquid, is patched across every participant in the network.
  • The portion beyond "most" that would be returned is left undefined, and no public timeline has been set for deploying the Elements patch.
  • Patching requires the Elements fix to be developed, tested, and coordinated across all Liquid nodes, and the halt remains in effect until that sequence completes.
  • Neither the shipping of the Elements patch nor the actors following through on the return is confirmed.

$BTC is in focus as Blockstream's Liquid Network, a Bitcoin sidechain, halted operations after a group identifying themselves as white-hat researchers withdrew 4,000 BTC, or $320 million, from the network. The actors told Blockstream they would return most of the withdrawn funds after a vulnerability in Elements, the software underlying Liquid, is patched across the network. The next concrete development to watch is that patch and any Blockstream statement on the status of the 4,000 BTC.

The white-hat framing shifts the read on the withdrawal. Rather than a clean seizure, the actors presented Blockstream with a conditional return: most of the 4,000 BTC comes back, but only after the Elements vulnerability is remediated across every participant in the Liquid Network. Two gaps sit inside that offer. The portion not covered by "most" is undefined in their terms, and no public timeline has been set for moving an Elements patch through the live network.

Patching across a live network requires more than writing a software fix. A remedy for the Elements flaw has to be developed and tested, then coordinated across all Liquid nodes before the return condition is met. Until that sequence completes, the halt remains in effect.

For $BTC, the Liquid suspension puts sidechain security architecture directly in view. How Blockstream navigates the Elements patch under these conditions, with a conditional return of $320 million in the balance, is the read-through for anyone tracking Bitcoin pegging infrastructure.

The setup turns on two things moving in sequence: the Elements patch shipping and the actors following through once it does. Neither is confirmed. Watch for a formal patch disclosure from Blockstream or an Elements network update confirming the vulnerability is closed, alongside any statement on the return of the 4,000 BTC.

Related reading

Tickers$BTC
Categorycrypto

Filed via cointelegraph.com

Keep reading

More from the markets desk

Frequently asked

How much was withdrawn from the Liquid Network?

The actors withdrew 4,000 BTC, valued at $320 million, from Blockstream's Liquid Network.

Why did the Liquid Network halt?

It halted after a group identifying as white-hat researchers exploited a vulnerability in Elements, the software underlying Liquid, to withdraw the funds, and the halt remains in effect until the flaw is patched.

Under what condition will the funds be returned?

The actors said they would return most of the 4,000 BTC only after the Elements vulnerability is remediated across every participant in the Liquid Network.

What should observers watch for next?

Watch for a formal patch disclosure from Blockstream or an Elements network update confirming the vulnerability is closed, along with any statement on the return of the 4,000 BTC.