Liquid Network Bitcoin sidechain exploited for ~$320M through consensus bug allowing minting of unbacked L-BTC.
Security & Exploits ·
A consensus bug in the Elements protocol underlying the Liquid Network Bitcoin sidechain enabled an attacker to mint approximately 4,000 unbacked L-BTC tokens on September 6–7, leading to the withdrawal of roughly 3,996 BTC valued near $320 million through SideSwap's peg-out mechanism. The attacker has claimed whitehat status, but the funds have not been returned.
The vulnerability allowed the creation of L-BTC without corresponding backing, exposing a flaw in the sidechain's asset-validation layer rather than compromising Bitcoin's base layer. The exploit targeted the bridge's redemption flow to convert the artificially minted tokens into actual bitcoin on the main network. Bitcoin mainnet itself remained unaffected by the incident.
The recovery status and identity of the attacker remain unclear. Market confidence in Liquid-based products now hinges on whether the drained funds are returned or the circumstances surrounding the exploit are fully disclosed. No timeline for resolution has been announced.