Morning Edition · Monday, September 7, 2026UpdatedPublished at 7:39 AM EDT · New York
Blockstream paused the settlement layer used by exchanges and told them to stop deposits and withdrawals, and the people who took the $320 million are now negotiating a conditional return through on-chain messages.

Updated at 7:39 AM EDT
The people holding the drained bitcoin have offered to return most of the funds once Blockstream fixes the underlying flaw, and say they sent the company technical details to help locate it.
Liquid Network, a settlement layer that exchanges use to move bitcoin between one another, halted all transactions after about 4,000 bitcoin worth roughly $320 million left the system, CoinDesk reported. Blockstream, which develops the network, traced the loss to a bug in the Elements protocol that allowed the creation of Liquid bitcoin that was never backed by a deposit. The tokens were then routed through the exchange service SideSwap.
The distinction matters technically. Security researchers cited by Bitcoin.com News said the flaw sat in the node software that validates transactions, not in stolen keys or compromised hardware. Nobody broke into a vault. The accounting rule that is supposed to guarantee one token for one deposited coin failed inside the code itself.
Those responsible attached a message to one transaction reading "we are whitehats. contact us on chain," BeInCrypto reported, and the negotiation has continued in public through further on-chain messages. In an update relayed on 7 September, the people holding the funds asked whether returning "most" of the bitcoin to Blockstream's federation address would be acceptable once the vulnerability is fixed, and CryptoSlate reported that they say they have sent Blockstream encrypted technical details to help locate and close the flaw. Alex Thorn, head of research at the digital-asset firm Galaxy Digital, said the material appears intended to assist the fix. Blockstream has not confirmed a timeline for reopening the network or for any return of funds, and exchanges remain unable to deposit or withdraw Liquid bitcoin.
Bitcoin itself was unaffected at the base layer and traded near $79,900. That distinction still matters most for understanding the event. The scarcity that makes bitcoin attractive to buyers holds true on the main chain, but almost none of the industry's actual settlement happens there. It happens on sidechains, custodial ledgers and wrapped representations, each of which reintroduces exactly the discretionary issuance risk the base asset was designed to remove. A conditional offer to return the funds does not undo that: it shows the system's integrity now depends on the goodwill of whoever found the flaw first.
Part of a tracked trend
The Layers Above Bitcoin Keep Breaking
Digital-asset markets keep concentrating settlement on sidechains, bridges and wrapped tokens whose issuance depends on code and operators rather than on the base chain, so failures that create unbacked supply recur and hit intermediaries rather than holders of the underlying asset.
Exchanges and market makers holding Liquid bitcoin absorb the loss, competing settlement layers gain the business, and whoever holds the 4,000 bitcoin gains either a bounty or the coins themselves depending on which label survives.
The halt, the amount and the on-chain "we are whitehats" message are corroborated by Bitcoin Magazine and Bitcoin.com News, but the precise mechanism (an Elements protocol bug, a federation multisig weakness or a coordination flaw) has not been publicly confirmed by Blockstream, and calling the actors white hats is their own self-description.
An open-source-intelligence read of how likely this story is true with its real nuance, not a judgment of any outlet. It assesses the claim, weighing independent and adversarial reporting. How we label confidence.
What this means
The exposure sits with exchanges and market makers who held Liquid bitcoin as working capital and now cannot move it. When a settlement layer freezes, inventory that was assumed to be instantly transferable becomes illiquid, which widens spreads and reduces the depth market makers can offer across venues. The wider consequence is a reminder that convenience layers built on top of a fixed-supply asset can create supply the base chain never authorised, and the people holding the wrapped claim, not the chain, absorb that loss.
Synthesized from: CoinDesk · Bitcoin.com News · BeInCrypto
Start a discussion in Townsquare.
More from this edition
What to watch
Observations to monitor, not financial advice.
Comments
0No comments yet.