Blockstream Hackers Demand 10% Bounty, Threaten 15% Holder Loss

1 hour ago

Blockstream’s standoff with the self-described achromatic hats down the Liquid Network exploit kicked into precocious cogwheel Wednesday aft the radical demanded a 10% bug bounty and threatened further losses for holders.

Key Takeaways

  • Blockstream’s hackers demanded a 10% bounty portion inactive holding 598.5 BTC.
  • Liquid’s achromatic hats returned 3,400 BTC, but the quality kicked into precocious cogwheel Sept. 9.
  • Blockstream could look much disclosures if hackers people their backstage cardinal aft the 10% dispute.

White Hats Come Out Swinging With 10% Demand

The latest message appeared connected the Bitcoin blockchain done OP_RETURN, a diagnostic that lets users connect tiny pieces of information to transactions. The aforesaid mechanics has go an improbable connection transmission betwixt Blockstream and the group.

The hackers accused Blockstream of failing to adequately support billions of dollars successful assets, claiming the institution allocated lone $1.5 million, “maybe adjacent 0,” toward security. The connection called the alleged concern “a flagrant neglect of information and a motion of implicit mismanagement.”

OP_RETURN screenshot. The achromatic hats’ connection to Blockstream embedded connected the Bitcoin blockchain.

The claims astir Blockstream’s information spending travel straight from the hackers and person not been independently established by Bitcoin.com News.

598.5 BTC Remains astatine Center of Escalating Standoff

The connection follows a wild thrust that began Sept. 6, erstwhile the radical drained astir 4,000 BTC from Liquid’s reserves earlier identifying themselves onchain arsenic achromatic hats and asking Blockstream to interaction them.

Blockstream subsequently communicated with the group done Bitcoin transactions and encrypted messages. On Monday, the hackers returned 3,400 BTC to the federation wallet but retained astir 598.5 BTC.

That remaining stash is present astatine the halfway of the dispute. The radical told Blockstream, “You SHALL wage 10% utilizing your ain wealth arsenic bug bounty,” earlier informing that refusing could “cause each your holders a 15% loss.”

Hackers Say Private Conversations Could Be Published

The latest connection besides suggests the backstage broadside of the negotiations whitethorn yet go public. The radical suggested that it plans to “publish the privatekey to decrypt our conversations afterwards.”

If carried out, that could exposure encrypted communications exchanged betwixt Blockstream and the hackers during the negotiations, perchance providing much details astir the vulnerability and discussions surrounding the returned bitcoin. Many of these messages were encrypted.

The hackers besides argued that companies participating successful bug bounty programs cannot warrant implicit security, portion accusing Blockstream of remaining “delusional, greedy, and arrogant.”

Blockstream Standoff Is Not Out of the Woods Yet

On the flip side, calling the radical achromatic hats has become progressively complicated. Keeping astir 600 BTC portion demanding outgo and threatening further losses raises questions astir wherever vulnerability disclosure ends and coercion begins.

For now, the particulate has hardly settled. The 598.5 BTC remains the biggest portion to watch, on with Blockstream’s effect to the 10% request and whether the hackers travel done connected their committedness to people the keys needed to uncover their backstage communications.

View source