2 hours ago
Published:Sep 11, 2026, 3:30 AM EDT
The information team, which has already uncovered thousands of vulnerabilities, hinted astatine a erstwhile disclosure of the bug that allowed a white-hat hacker to instrumentality power of astir 4,000 BTC. Calle, who leads the team, stressed that Blockstream ignored their emails earlier the incident.
Published: Sep 11, 2026, 3:30 AM EDT
Key Takeaways
- Bitcoin Red Team claimed it warned Blockstream earlier the hack, fueling statement implicit preventable losses.
- Blockstream denied ignoring information warnings, attributing the vulnerability to a flawed AI bug fix.
- Liquid restored transactions connected Sept 10, but peg-outs stay disabled with astir 600 BTC inactive missing.
Bitcoin Red Team Allegedly Reported Liquid Bug Before 4,000 BTC Incident
While the combat to recover the astir 600 BTC remaining from the Liquid exploit incidental continues, a radical of information developers pointed retired that this theft mightiness person been avoided successful the archetypal place.
The Bitcoin Red Team, a radical of volunteers dedicated to auditing and disclosing vulnerabilities crossed bitcoin-aligned projects that surged aft the Coldcard exploit, indirectly signaled that it had already disclosed the vulnerability exploited to determination adjacent to 4,000 BTC from the Liquid federation wallets.
Answering a station by Blockstream laminitis and CEO Adam Back, who explained that the bug that allowed the hack to hap was introduced “due to an incorrect bug fix, to an AI-found bug which was besides a non-critical bug,” Bitcoin Red Team co-lead Calle stated:
“Turns retired it lone costs you 600 BTC to disregard an email from the reddish team.”
Calle continued, stating that Back’s statements were inaccurate and that Blockstream had lone “selectively and inaccurately mentioned the patches without implicit and precise wide past of acknowledgement.”
Nonetheless, erstwhile Blockstream CSO Samson Mow stressed that nary emails were ignored, declaring these insinuations diminished the Red Team’s professionalism.
“We volition springiness Blockstream clip to reconstruct orderly operations and people a postmortem connected the liquid hack earlier we stock our ain implicit relationship of the disclosure process,” Calle concluded, hinting astatine conflicting versions of the aforesaid events starring to the hack.
While the sidechain web had been detained since the incidental was disclosed, connected September 10, Liquid restarted artifact accumulation without enabling transactions. At the clip of writing, transactions person been enabled, and nodes are validating blocks. Nonetheless, peg-outs stay disabled “as a precautionary measure,” offering nary defined timeframe for their resumption.
The white-hat hacker inactive controls the remaining BTC, meaning a 3rd enactment would person to deposit the needed assets to guarantee a 1:1 peg betwixt BTC and L-BTC, the autochthonal liquid asset.
English (US) 