← Trends

Negotiated Attacker Fees Become Standard Practice

Large on-chain thefts increasingly end in a negotiated partial return where the attacker unilaterally sets a percentage bounty, turning exploits into a de facto pricing mechanism for unfound bugs and weakening the deterrent value of formal bug bounty programs.

weakening · confidence 34 · Emerging (watchlist) · tracking since September 13, 2026 · updated September 14, 2026

Sign in to get threshold and movement alerts for this trend.

Score history

Daily conviction score, 0 to 100. Higher means the thesis is more strongly corroborated.

Sep 13 · 40Sep 14 · 34

Now 34 · -6 since Sep 13 · ranged 34 to 40

Why the conviction moved

  • Sep 14
    Weakened

    Symbiosis offered a 20% white-hat bounty that expired on September 13 with no return, and the protocol instead recovered roughly 15 BTC itself into a team multisig. The negotiated-fee mechanism failed here: the attacker declined a bounty set well above the customary 10%.

  • Sep 13
    Strengthened +6

    The Liquid attackers returned 3,400 of roughly 4,000 bitcoin taken from Blockstream's federation wallet and unilaterally kept exactly 15 percent, about $47 million, as a self-declared finder's fee. The attacker setting the percentage — above the customary 10 percent whitehat norm — is the pricing mechanism the thesis describes operating without the victim's consent.

Source trail

  • Contradicting · September 14, 2026

    Symbiosis Bridge Attacker Minted 46 Billion Fake Bitcoin Tokens and Realized About $336,000

    Symbiosis offered a 20% white-hat bounty that expired on September 13 with no return, and the protocol instead recovered roughly 15 BTC itself into a team multisig. The negotiated-fee mechanism failed here: the attacker declined a bounty set well above the customary 10%.

    CryptoSlate
  • Supporting · September 13, 2026

    Blockstream Demands the 598 Bitcoin Liquid Attackers Kept as a Self-Declared Finder's Fee

    The Liquid attackers returned 3,400 of roughly 4,000 bitcoin taken from Blockstream's federation wallet and unilaterally kept exactly 15 percent, about $47 million, as a self-declared finder's fee. The attacker setting the percentage — above the customary 10 percent whitehat norm — is the pricing mechanism the thesis describes operating without the victim's consent.

    Bitcoin Magazine

Unlock full source trail, score history, and daily updates.

Unlock Trends

Affected regions & assets

RegionsGlobal
Assets2 assetsUnlock Trends

Townsquare

Argue the thesis in Townsquare.