{"id":560736,"date":"2026-09-07T09:55:13","date_gmt":"2026-09-07T08:55:13","guid":{"rendered":"https:\/\/cryptoslate.com\/?p=560736"},"modified":"2026-09-07T09:22:26","modified_gmt":"2026-09-07T08:22:26","slug":"a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw","status":"publish","type":"post","link":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/","title":{"rendered":"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw"},"content":{"rendered":"<p><a href=\"https:\/\/cryptoslate.com\/blockstream-launches-liquid-network-exchanges-can-now-transfer-bitcoin-in-under-2-minutes\/\">Liquid Network<\/a> was effectively halted after nearly $320 million in Bitcoin left its federation reserve through an abnormal peg-out.<\/p>\n<p>The incident began Sept. 6 when a customer submitted 4,000 L-BTC to SideSwap\u2019s peg-out service, which converts Bitcoin represented on Liquid back into BTC on the main network.<\/p>\n<p>SideSwap <a href=\"https:\/\/x.com\/side_swap\/status\/2096709838310928674\">said<\/a> the request passed the normal authorization process and prompted the Liquid Federation to release about 3,996 BTC. The Bitcoin later moved to an address that held roughly 3,998.5 BTC at the latest check.<\/p>\n<p>Liquid <a href=\"https:\/\/x.com\/Liquid_BTC\/status\/2096696272447218108\">disabled<\/a> its bridge nodes after the withdrawal, while SideSwap suspended swaps, peg-ins, and peg-outs. Exchanges also paused or prepared to pause L-BTC deposits and withdrawals as operators investigated the incident.<\/p>\n<p>The actors controlling the Bitcoin subsequently identified themselves through on-chain messages as \u201cwhitehats\u201d and said they intended to return most of the funds once the underlying bug had been fixed across the network.<\/p>\n\n<div class=\"cs-article-embed\">\n    <a href=\"https:\/\/cryptoslate.com\/blockstream-enables-smart-contract-programmability-on-bitcoin-via-simplicity-on-liquid-network\/\" class=\"cs-article-embed__link\">\n        <div class=\"cs-article-embed__body\">\n            <span class=\"cs-article-embed__related-reading\">Related Reading<\/span>\n            <h3 class=\"cs-article-embed__title\">Blockstream enables smart contract programmability on Bitcoin via Simplicity on Liquid Network<\/h3>\n        <\/div>\n        <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\">\n            <i class=\"fa-light fa-arrow-up-right\"><\/i>\n        <\/span>\n    <\/a>\n<\/div>\n\n<p>That prospect could limit the eventual financial loss. However, it does not resolve the more important question of how almost 4,000 BTC left the federation without an apparent key compromise.<\/p>\n<h2>The withdrawal appears to have followed the rules<\/h2>\n<p>Liquid and SideSwap say the incident did not involve stolen signing credentials.<\/p>\n<p>The withdrawal used SideSwap\u2019s valid Peg-out Authorization Key, or PAK, and Liquid said neither that key nor other federation keys were compromised.<\/p>\n<p>Instead, SideSwap said Blockstream traced the 4,000 L-BTC presented for redemption to a flaw in Elements, the software underlying Liquid.<\/p>\n<p>If that explanation is confirmed, the problem occurred before the Bitcoin transaction was signed.<\/p>\n<p>Liquid is designed to maintain one BTC in its federation reserve for every L-BTC in circulation. During a normal peg-out, L-BTC is burned, and an equivalent amount of Bitcoin is released.<\/p>\n<p><a href=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-8c099d11-8d3a-4b93-adb8-7f713644e0bc.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-560739\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-8c099d11-8d3a-4b93-adb8-7f713644e0bc.png\" alt=\"Timeline showing Liquid\u2019s 4,000 L-BTC peg-out, 3,996 BTC payout, later 3,998.5 BTC movement, pause status and restart requirements.\" width=\"720\" height=\"1293\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-8c099d11-8d3a-4b93-adb8-7f713644e0bc.png 936w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-8c099d11-8d3a-4b93-adb8-7f713644e0bc-167x300.png 167w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-8c099d11-8d3a-4b93-adb8-7f713644e0bc-570x1024.png 570w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-8c099d11-8d3a-4b93-adb8-7f713644e0bc-768x1379.png 768w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-8c099d11-8d3a-4b93-adb8-7f713644e0bc-855x1536.png 855w\" sizes=\"(max-width: 720px) 100vw, 720px\" \/><\/a><\/p>\n<p>In this case, SideSwap says a software bug created L-BTC without corresponding Bitcoin backing. Those tokens nevertheless entered a valid peg-out process, after which federation functionaries treated the withdrawal as legitimate and released real BTC.<\/p>\n<p>Blockchain security firm Bitslab <a href=\"https:\/\/x.com\/0xbitslab\/status\/2096848949625962917\">said<\/a> at least 11 of Liquid\u2019s 15 functionaries ultimately signed the transaction.<\/p>\n<p>That points to a different type of failure from a conventional bridge exploit. Secure keys provide limited protection if every signer is presented with the same invalid state and accepts it as legitimate.<\/p>\n<p>No independent technical postmortem or detailed patch description was public at the latest check, leaving the precise cause attributed to Liquid and SideSwap.<\/p>\n<h2>Whitehats want the bug fixed before returning Bitcoin<\/h2>\n<p>Meanwhile, the actors holding the funds have been communicating with Blockstream through Bitcoin transactions carrying <a href=\"https:\/\/cryptoslate.com\/bitcoin-cores-op_return-limit-removal-divides-crypto-community\/\">OP_RETURN messages<\/a>.<\/p>\n<p>Galaxy Digital research head Alex Thorn <a href=\"https:\/\/x.com\/intangiblecoins\/status\/2096808321332158474\">said<\/a> Blockstream first sent a message asking the holder to contact its security team. The holder later responded that it planned to send \u201cmost\u201d of the Bitcoin back to the federation.<\/p>\n<figure id=\"attachment_560745\" aria-describedby=\"caption-attachment-560745\" style=\"width: 2560px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-560745 size-full\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/HRlcDR-a0AAtSg8-scaled.jpg\" alt=\"Liquid Network White hat Hackers Communications With Blockstream\" width=\"2560\" height=\"1153\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/HRlcDR-a0AAtSg8-scaled.jpg 2560w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/HRlcDR-a0AAtSg8-300x135.jpg 300w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/HRlcDR-a0AAtSg8-1024x461.jpg 1024w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/HRlcDR-a0AAtSg8-768x346.jpg 768w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/HRlcDR-a0AAtSg8-1536x692.jpg 1536w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/HRlcDR-a0AAtSg8-2048x923.jpg 2048w\" sizes=\"(max-width: 2560px) 100vw, 2560px\" \/><figcaption id=\"caption-attachment-560745\" class=\"wp-caption-text\">Liquid Network White-Hat Hackers On-Chain Messages With Blockstream (Source: Galaxy Digital)<\/figcaption><\/figure>\n<p>A subsequent message added a condition that <a href=\"https:\/\/cryptoslate.com\/companies\/blockstream\/\">Blockstream<\/a> should fix the bug first and ensure every node is patched before returning the funds.<\/p>\n<p>That puts Liquid\u2019s next steps beyond simply recovering the Bitcoin.<\/p>\n<p>The federation must identify and remediate the Elements flaw, distribute the fix across affected nodes, and establish that another batch of invalid L-BTC cannot pass through the same authorization process.<\/p>\n<p>It must also reconcile the reserve.<\/p>\n<p>The allegedly bug-created L-BTC was burned during the peg-out, but about 3,996 real BTC still left Liquid\u2019s federation wallet. Until those funds return or the accounting is otherwise restored, the network still has to demonstrate that legitimate outstanding L-BTC remains backed one-for-one.<\/p>\n<p>Liquid\u2019s bridge nodes remain disabled while that work continues.<\/p>\n<p>While the incident may ultimately end with most of the <a href=\"https:\/\/cryptoslate.com\/coins\/bitcoin\/\">Bitcoin<\/a> recovered, the harder task is proving that the system which authorized its release cannot make the same mistake twice.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SideSwap says bug-created L-BTC passed a valid authorization as bridge nodes paused and reserve reconciliation became the restart test.<\/p>\n","protected":false},"author":720,"featured_media":560746,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[77968,16041,37],"tags":[81073,82380,76769],"prediction_market_topic":[],"post_folder":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.9 (Yoast SEO v21.9.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw<\/title>\n<meta name=\"description\" content=\"Liquid network says its signing credentials remained secure even as invalid L-BTC was redeemed for real Bitcoin.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw\" \/>\n<meta property=\"og:description\" content=\"Liquid network says its signing credentials remained secure even as invalid L-BTC was redeemed for real Bitcoin.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/\" \/>\n<meta property=\"og:site_name\" content=\"CryptoSlate\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-07T08:55:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-07T08:22:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/liquid-bridge-pause.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Oluwapelumi Adejumo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:site\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oluwapelumi Adejumo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/\"},\"author\":{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/#person\",\"name\":\"Oluwapelumi Adejumo\",\"url\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/\"},\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/#authorimage\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-300x300.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-300x300.jpg\",\"caption\":\"Oluwapelumi Adejumo\"},\"jobTitle\":\"Senior Reporter\",\"description\":\"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.\",\"worksFor\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"sameAs\":[\"https:\/\/x.com\/hardeyjumoh\",\"https:\/\/www.linkedin.com\/in\/oluwapelumi-adejumo\",\"https:\/\/muckrack.com\/oluwapelumi-adejumo\"]},\"headline\":\"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw\",\"datePublished\":\"2026-09-07T08:55:13+00:00\",\"dateModified\":\"2026-09-07T08:55:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/\"},\"wordCount\":643,\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"keywords\":[\"Bitcoin\",\"Blockstream\",\"BTC\"],\"articleSection\":[\"Featured\",\"Hacks\",\"Technology\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/\",\"url\":\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/\",\"name\":\"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/#website\"},\"datePublished\":\"2026-09-07T08:55:13+00:00\",\"dateModified\":\"2026-09-07T08:55:13+00:00\",\"description\":\"Liquid network says its signing credentials remained secure even as invalid L-BTC was redeemed for real Bitcoin.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptoslate.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptoslate.com\/#website\",\"url\":\"https:\/\/cryptoslate.com\/\",\"name\":\"CryptoSlate\",\"description\":\"Cryptocurrency News and Real-time Coin Data\",\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"NewsMediaOrganization\",\"@id\":\"https:\/\/cryptoslate.com\/#organization\",\"name\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"CryptoSlate\"},\"image\":{\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/cryptoslate\",\"https:\/\/www.instagram.com\/cryptoslate\",\"https:\/\/www.linkedin.com\/company\/cryptoslate\",\"https:\/\/www.youtube.com\/c\/cryptoslate\",\"https:\/\/cryptoslate.substack.com\",\"https:\/\/t.me\/cryptoslatenews\",\"https:\/\/www.crunchbase.com\/organization\/cryptoslate\",\"https:\/\/iq.wiki\/wiki\/cryptoslate\",\"https:\/\/news.google.com\/publications\/CAAqKggKIiRDQklTRlFnTWFoRUtEMk55ZVhCMGIzTnNZWFJsTG1OdmJTZ0FQAQ\",\"https:\/\/muckrack.com\/media-outlet\/cryptoslate\",\"https:\/\/www.tiktok.com\/@cryptoslatenews\"],\"publishingPrinciples\":\"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#editorial-principles\",\"ownershipFundingInfo\":\"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/\",\"correctionsPolicy\":\"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#corrections-feedback\",\"ethicsPolicy\":\"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#editorial-principles\",\"foundingDate\":\"2017-08-04\",\"founder\":[{\"@type\":\"Person\",\"name\":\"Nate Whitehill\"},{\"@type\":\"Person\",\"name\":\"Matthew Blancarte\"}],\"contactPoint\":[{\"@type\":\"ContactPoint\",\"contactType\":\"customer support\",\"url\":\"https:\/\/cryptoslate.com\/contact\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"sales\",\"url\":\"https:\/\/cryptoslate.com\/advertising\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"newsroom\",\"url\":\"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#corrections-feedback\",\"email\":\"tips@cryptoslate.com\",\"availableLanguage\":\"en-US\"}],\"masthead\":\"https:\/\/cryptoslate.com\/about\/#masthead\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/b333928a322ba4c082e8bb2ad0f14eb6\",\"name\":\"Oluwapelumi Adejumo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-150x150.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-150x150.jpg\",\"caption\":\"Oluwapelumi Adejumo\"},\"description\":\"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.\",\"jobTitle\":\"Reporter\",\"worksFor\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw","description":"Liquid network says its signing credentials remained secure even as invalid L-BTC was redeemed for real Bitcoin.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/","og_locale":"en_US","og_type":"article","og_title":"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw","og_description":"Liquid network says its signing credentials remained secure even as invalid L-BTC was redeemed for real Bitcoin.","og_url":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/","og_site_name":"CryptoSlate","article_published_time":"2026-09-07T08:55:13+00:00","article_modified_time":"2026-09-07T08:22:26+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/liquid-bridge-pause.jpg","type":"image\/jpeg"}],"author":"Oluwapelumi Adejumo","twitter_card":"summary_large_image","twitter_creator":"@cryptoslate","twitter_site":"@cryptoslate","twitter_misc":{"Written by":"Oluwapelumi Adejumo","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/#article","isPartOf":{"@id":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/"},"author":{"@type":"Person","@id":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/#person","name":"Oluwapelumi Adejumo","url":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/"},"image":{"@type":"ImageObject","@id":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/#authorimage","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-300x300.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-300x300.jpg","caption":"Oluwapelumi Adejumo"},"jobTitle":"Senior Reporter","description":"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.","worksFor":{"@id":"https:\/\/cryptoslate.com\/#organization"},"sameAs":["https:\/\/x.com\/hardeyjumoh","https:\/\/www.linkedin.com\/in\/oluwapelumi-adejumo","https:\/\/muckrack.com\/oluwapelumi-adejumo"]},"headline":"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw","datePublished":"2026-09-07T08:55:13+00:00","dateModified":"2026-09-07T08:55:13+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/"},"wordCount":643,"publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"keywords":["Bitcoin","Blockstream","BTC"],"articleSection":["Featured","Hacks","Technology"],"inLanguage":"en-US","copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/cryptoslate.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/","url":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/","name":"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw","isPartOf":{"@id":"https:\/\/cryptoslate.com\/#website"},"datePublished":"2026-09-07T08:55:13+00:00","dateModified":"2026-09-07T08:55:13+00:00","description":"Liquid network says its signing credentials remained secure even as invalid L-BTC was redeemed for real Bitcoin.","breadcrumb":{"@id":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cryptoslate.com\/a-whitehat-hacker-is-holding-320-million-in-drained-bitcoin-until-developers-prove-they-patched-a-fatal-network-flaw\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptoslate.com\/"},{"@type":"ListItem","position":2,"name":"A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw"}]},{"@type":"WebSite","@id":"https:\/\/cryptoslate.com\/#website","url":"https:\/\/cryptoslate.com\/","name":"CryptoSlate","description":"Cryptocurrency News and Real-time Coin Data","publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"inLanguage":"en-US"},{"@type":"NewsMediaOrganization","@id":"https:\/\/cryptoslate.com\/#organization","name":"CryptoSlate","url":"https:\/\/cryptoslate.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","width":1000,"height":1000,"caption":"CryptoSlate"},"image":{"@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/cryptoslate","https:\/\/www.instagram.com\/cryptoslate","https:\/\/www.linkedin.com\/company\/cryptoslate","https:\/\/www.youtube.com\/c\/cryptoslate","https:\/\/cryptoslate.substack.com","https:\/\/t.me\/cryptoslatenews","https:\/\/www.crunchbase.com\/organization\/cryptoslate","https:\/\/iq.wiki\/wiki\/cryptoslate","https:\/\/news.google.com\/publications\/CAAqKggKIiRDQklTRlFnTWFoRUtEMk55ZVhCMGIzTnNZWFJsTG1OdmJTZ0FQAQ","https:\/\/muckrack.com\/media-outlet\/cryptoslate","https:\/\/www.tiktok.com\/@cryptoslatenews"],"publishingPrinciples":"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#editorial-principles","ownershipFundingInfo":"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/","correctionsPolicy":"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#corrections-feedback","ethicsPolicy":"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#editorial-principles","foundingDate":"2017-08-04","founder":[{"@type":"Person","name":"Nate Whitehill"},{"@type":"Person","name":"Matthew Blancarte"}],"contactPoint":[{"@type":"ContactPoint","contactType":"customer support","url":"https:\/\/cryptoslate.com\/contact\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"sales","url":"https:\/\/cryptoslate.com\/advertising\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"newsroom","url":"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#corrections-feedback","email":"tips@cryptoslate.com","availableLanguage":"en-US"}],"masthead":"https:\/\/cryptoslate.com\/about\/#masthead"},{"@type":"Person","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/b333928a322ba4c082e8bb2ad0f14eb6","name":"Oluwapelumi Adejumo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-150x150.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-150x150.jpg","caption":"Oluwapelumi Adejumo"},"description":"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.","jobTitle":"Reporter","worksFor":"CryptoSlate","url":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/560736"}],"collection":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/users\/720"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/comments?post=560736"}],"version-history":[{"count":3,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/560736\/revisions"}],"predecessor-version":[{"id":560747,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/560736\/revisions\/560747"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media\/560746"}],"wp:attachment":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media?parent=560736"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/categories?post=560736"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/tags?post=560736"},{"taxonomy":"prediction_market_topic","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/prediction_market_topic?post=560736"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/post_folder?post=560736"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}