liquid network · Aqua Wallet
Update to incident: ~4,000 BTC withdrawn from Liquid Federation wallet; Liquid network suspended
Blockstream: Liquid network restart expected in 4–5 days
The official report on the incident involving unauthorized withdrawals from Liquid's federation wallet clarifies the recovery timeline: about 85% of the stolen BTC has already been returned to the federation, an emergency software release is being prepared, and the network itself is currently estimated to resume in 4–5 days. Aqua Wallet users' private keys are not affected, and native bitcoin operations are working normally — only Liquid services have been suspended.
Incident history
- 06 Sept~4,000 BTC withdrawn from Liquid Federation wallet; Liquid network suspended
- 07 SeptAbout 4,000 BTC withdrawn without authorization from Liquid Federation wallet; some already returned
- 08 SeptBlockstream deploys updated software and prepares a coordinated restart of the Liquid network
- 08 SeptBlockstream identifies cause of Liquid incident: range proof vulnerability in the Elements protocol
- 08 SeptBlockstream: Liquid network restart expected in 4–5 days
- 09 SeptFollowing the Liquid incident, a wave of phishing impersonating Blockstream and Liquid
- 10 SeptLiquid produces blocks again, but without transactions for now; peg operations remain suspended
- 10 SeptLiquid transactions are going through again; peg operations remain suspended for now
- 10 SeptLiquid resumes transactions, peg-outs remain disabled; node operators urged to update Elements immediately