The 'White Hat' Fairy Tale: Liquid Network's $340 Million Wake-Up Call
AI-generated image · US National Wire
Blockstream's settlement network claims a benevolent hacker returned the bulk of a massive heist, but the remaining $47 million is a stark reminder of the industry's fragility.
Let's get one thing straight: calling a thief a 'white hat' doesn't erase the fact that they just walked through the front door of a multi-million dollar vault.
As TechCrunch first reported, a hacker recently exploited a bug to drain approximately $340 million in Bitcoin from the Liquid Network, a settlement exchange launched in 2018 by the crypto firm Blockstream. While the industry loves a redemption arc, the reality is that one of the largest known thefts of the year happened because the security was fundamentally broken.
***
**OPINION: The Smokescreen**
In my view, the narrative of the 'benevolent hacker' is a convenient fiction. When a vulnerability is so severe that it allows for the theft of thousands of bitcoins, it isn't a 'security test'—it's a catastrophic failure. The fact that the hacker demanded a bug fix in exchange for the funds proves that Blockstream was operating with a glaring hole in its armor. We are still playing with fire, and the only reason this didn't end in a total wipeout is that the perpetrator decided to be merciful.
***
**The Fallout**
As TechCrunch reports, Blockstream acknowledged the incident in a post on X, stating that a "white hat" hacker had targeted the network's wallet. The company has since paused all operations to address the breach.
Former Blockstream executive Samson Mow provided further details via X on Monday, noting that the company has since fixed the bug. According to Mow, the hacker has returned roughly 3,400 of the approximately 4,000 stolen bitcoins. However, the 'benevolence' has its limits: about 600 bitcoins, valued at roughly $47 million, remain under the hacker's control.
Mow indicated that operations will stay offline until the company implements additional security improvements and fixes. The scale of the breach is so significant that it has already been flagged as one of the largest digital fund heists to date by the Rekt leaderboard, which tracks cryptocurrency thefts.