Blockstream Rejects 10% Bounty Demand, Says It Will Cover Liquid’s Bitcoin Gap

Blockstream has refused to pay for the return of the Bitcoin nonetheless lacking from the Liquid Community. It will probably refuse as a result of it has already agreed to cowl the shortfall itself.

The actors holding roughly 598.5 BTC demanded a ten% bounty from Blockstream’s personal funds, warning that Liquid holders would in any other case face a 15% loss. Chief Government Adam Again mentioned on Wednesday that the 1:1 LBTC to BTC peg will probably be coated, which removes the risk the demand rests on.

Blockstream revealed its place on Friday in a pinned assertion addressed to these answerable for the theft, to the Bitcoin neighborhood, and to whoever is holding the cash.

What the Firm Stated

The assertion rejects the framing the actors have used since September 6. Taking belongings with out authorization and withholding their return is against the law moderately than accountable disclosure, Blockstream mentioned, including that it isn’t white-hat exercise however theft.

The corporate mentioned it had engaged in good religion to safe the return of stolen person funds and shield the broader Bitcoin neighborhood and that this effort shouldn’t be mistaken for acceptance of the actions taken or the phrases being demanded.

On the demand itself, Blockstream mentioned it won’t be occasion to a precedent below which open-source software program developed for the Bitcoin neighborhood topics its builders to paying a ransom far exceeding their financial participation. It added that Bitcoin is difficult cash that can’t be minted with out prices and doesn’t cost customers to pay a ransom.

The Line That Solutions the Risk

That final sentence responds to one thing particular. The Crypto Instances reported on Wednesday that on-chain plaintext from the actors on September 9 demanded Blockstream pay 10% utilizing its personal cash as a bug bounty, or trigger all its holders a 15% loss.

A haircut would imply LBTC holders absorbing the shortfall, with every token backed by lower than one Bitcoin. That was the leverage.

It not applies. When Liquid restarted block production on September 10, Again acknowledged publicly that the 1:1 peg will probably be coated. With Blockstream absorbing the hole, the end result the actors threatened falls on the corporate moderately than on customers—which is what makes refusal potential.

What Occurs if the Cash Keep Gone

Blockstream instructed these holding the Bitcoin, there may be nonetheless a possibility to resolve the matter responsibly and that the cash may be returned and the events revert to plain white-hat rules.

Failing that, the corporate mentioned it’s going to pursue each lawful avenue out there, working with regulation enforcement, exchanges, service suppliers, forensic specialists, and different related events to hint and get better the belongings and establish these accountable.

It additionally made an argument in regards to the medium. Bitcoin is clear by design, the assertion mentioned, and transactions don’t disappear—nor does the proof they depart behind. TRM Labs says it has labelled the attackers’ addresses and continues to trace the funds that weren’t returned.

The Excellent Quantity

About 598.5 BTC, value roughly $47 million, has not come again. The Crypto Instances reported the partial return on September 8, when 3,400 BTC was despatched to the federation pockets at 16:09 UTC on September 7, about 85% of what was taken.

The retained quantity was not a separate switch. It’s the change from the identical transaction, returned to the actor-controlled handle. CertiK famous on the time that it may function a bounty, although no formal settlement has been publicly confirmed.

SideSwap returned roughly 4 BTC in peg-out charges it had obtained, bringing the federation pockets to about 3,601.42 BTC.

How It Began

Round 3,998.5 BTC left Liquid’s federation pockets on September 6, from a reserve of roughly 4,200 BTC, valued close to $320 million on the time. The Crypto Instances reported the pause that day.

No non-public keys had been compromised. A variety-proof cache-key flaw in Components, the open-source software program underpinning Liquid, allowed the creation of roughly 4,000 unbacked L-BTC, which had been routed via SideSwap’s peg-out service below a legitimate authorization and transformed into actual Bitcoin. Components v23.3.4 was launched to harden the cache keys.

Block manufacturing resumed on September 10, with peg-in and peg-out operations nonetheless suspended. Blockchain analytics agency TRM Labs, which places the theft at $319 million by itself valuation, has recorded it as the most important crypto theft of 2026, forward of the April thefts from KelpDAO and Drift. It counts roughly $1.73 billion stolen throughout 333 incidents this 12 months, a report variety of incidents even because the greenback complete runs beneath earlier years.

Disclaimer: The data researched and reported by The Crypto Instances is for informational functions solely and isn’t an alternative choice to skilled monetary recommendation. Investing in crypto belongings includes vital danger as a consequence of market volatility. At all times Do Your Personal Analysis (DYOR) and seek the advice of with a professional Monetary Advisor earlier than making any funding choices.