A group claiming to be white-hat hackers has moved roughly $320 million worth of Bitcoin out of the Liquid Network, sparking an unusual public exchange with sidechain operator Blockstream conducted entirely through cryptographically signed on-chain messages.
What Happened on Liquid
The Liquid Network, a Bitcoin sidechain developed by Blockstream, saw a massive withdrawal of funds by individuals who describe themselves as white-hat security researchers. The parties involved have been communicating directly by embedding PGP-signed messages within Bitcoin transactions, an approach that leaves a transparent and verifiable record of their dialogue on the blockchain.
The self-identified hackers say their intent is not malicious, positioning the movement of funds as a demonstration of a vulnerability rather than an outright theft. That framing places the incident in the murky territory that often surrounds so-called white-hat exploits, where the line between security research and unauthorized access can be difficult to draw.
Both sides are now talking to each other in messages permanently etched into the Bitcoin blockchain.
An Unusual On-Chain Negotiation
What sets this episode apart is the method of communication. By using PGP signatures attached to transactions, both Blockstream and the hackers can prove the authenticity of their statements, ensuring that neither party can be impersonated during the exchange.
This on-chain dialogue effectively turns the Bitcoin ledger into a public negotiating table, where every message is timestamped and immutable. It offers observers a rare, real-time window into how a security incident of this scale is being handled between the parties.
Key elements of the situation include:
- Approximately $320 million in Bitcoin withdrawn from the Liquid Network
- Actors claiming white-hat, rather than malicious, motivations
- Messages exchanged via PGP-signed Bitcoin transactions
- Blockstream engaging directly with the group in public
Why It Matters
Liquid is designed to enable faster and more confidential Bitcoin transactions for traders and institutions, making the security of its funds a significant concern for the broader crypto ecosystem. An incident of this magnitude raises questions about the resilience of sidechain infrastructure and the mechanisms in place to recover or secure assets.
The outcome of the ongoing exchange could set a precedent for how projects handle large-scale exploits when the responsible parties present themselves as researchers