Following the Liquid incident, a wave of phishing impersonating Blockstream and Liquid

Amid the incident involving the withdrawal of funds from Liquid's federal wallet, scammers impersonating Liquid, Blockstream and their support have become active. Fake websites and mailings ask users to enter a recovery phrase, transfer funds to a “recovery” address, “update their portfolio” or install firmware/an app through an email link. Blockstream officially confirms that the incident itself does not require users to take any such actions.

Actions to take

Do not follow links or enter your seed phrase in any “migration” forms or checkers, do not transfer funds to addresses sent to you, and do not install software from emails or DMs. Install Jade updates and firmware only through the official Blockstream app or official website; the link is in the post.

Source: blog.blockstream.com

Incident history

06 Sept~4,000 BTC withdrawn from Liquid Federation wallet; Liquid network suspended
07 SeptAbout 4,000 BTC withdrawn without authorization from Liquid Federation wallet; some already returned
08 SeptBlockstream deploys updated software and prepares a coordinated restart of the Liquid network
08 SeptBlockstream identifies cause of Liquid incident: range proof vulnerability in the Elements protocol
08 SeptBlockstream: Liquid network restart expected in 4–5 days
09 SeptFollowing the Liquid incident, a wave of phishing impersonating Blockstream and Liquid
10 SeptLiquid produces blocks again, but without transactions for now; peg operations remain suspended
10 SeptLiquid transactions are going through again; peg operations remain suspended for now
10 SeptLiquid resumes transactions, peg-outs remain disabled; node operators urged to update Elements immediately