Liquid Network Attack Pegs Out 4,000 Digital Assets Through Elements Bug

A Forged Mint on Liquid

Attackers minted about 4,000 unbacked L-BTC on Liquid Network early in September and pegged them out one-for-one for real bitcoins, a haul worth close to $320 million at the time. Liquid, the Bitcoin sidechain built by Blockstream, runs on Elements, the open-source platform for Bitcoin sidechains, and an inflation bug in that code let the intruders conjure roughly 4,000 fake units of its wrapped Bitcoin token and push them through the exit mechanism into genuine mainchain coins. Federation keys were never compromised; the fault sat in the issuance code itself. That distinction matters: coins moved because the chain accepted a forged mint, not because anyone's keys were stolen. What followed played out in public, in the one place both sides could read it: the chain itself. Self-described white-hat actors negotiated through OP_RETURN messages written into transactions, output marked unspendable so the thread cannot be altered or deleted, and returned 3,400 BTC of the pegged-out sum, keeping about 600 BTC. Both the forged mint and the exit remain visible in Liquid's block history. Samson Mow later described the episode as part of an “avalanche of AI-assisted attacks” that had already reached other Bitcoin-adjacent software before hitting Liquid. The episode ranks as the year's second-largest single loss, behind only Bitget's exchange drain three weeks later. The breach also sits inside a wider 2026 ledger. Researcher Stacy Muur counts 230 hacked protocols above $50,000 this year, with net losses after freezes and returns near $2.35 billion, a net figure because frozen or returned funds come off the gross damage. Her September figure alone runs to roughly $768 million, with centralized exchange and DeFi losses doing most of the damage rather than pure self-custody hardware wallets. “Crypto security is absolutely cooked,” she wrote alongside the list.

Bitget and DeFi Carry the Losses

The year's largest single loss came on September 24, when Bitget's hot wallet and warm wallet infrastructure was drained of roughly $387.5 million. Forensic firms including Chainalysis, Elliptic and TRM Labs linked the incident to North Korea, citing VPN use patterns that match earlier DPRK-linked infrastructure and on-chain overlaps with wallets tied to the Lazarus Group and TraderTraitor, including the 2025 Bybit theft. The attackers injected fraudulent withdrawal commands by abusing third-party security products, never touching the private keys themselves. DeFi platforms produced the same concentration of high-value losses. Drift Protocol lost an estimated $285 million to $296 million in April through a compromise of governance and multisig controls that followed months of social engineering, an operation a project-commissioned investigation attributed to North Korean actors. KelpDAO's LayerZero-powered rsETH bridge was drained of about $292 million in unbacked tokens after its single-verifier design was subverted, with LayerZero pointing preliminary indicators at the DPRK's Lazarus Group, specifically TraderTraitor. Tectonic on Cronos saw roughly $120.4 million borrowed against manipulated collateral in late August; validators rewound the chain and recovered most of it, though several million dollars already bridged off-network were never restored. Hardware-adjacent incidents drew heavy coverage but smaller sums. Galaxy Research placed the Coinkite RNG exploit at roughly 1,596 to 1,789 BTC, on the order of $100–130 million, with upper-bound estimates near 2,055 BTC. Ledger losses of $86 million to $102 million traced to devices sold through authorized Southeast Asian reseller CryptoBilis, where a hardware implant, installed without authorization, recorded recovery phrases as devices were set up; the company stated confirmed cases were limited to that reseller's supply chain, though unconfirmed reports describe bugged devices reaching German markets. The tooling backdrop changed this year: code-flaw exploits accelerated after February releases of models including GPT-5.3-Codex and Claude Opus 4.6, which cleared smart-contract bug benchmarks at high rates and low cost, and Muur has warned that AI is making it far easier to find and exploit bugs, calling the moment a serious cybersecurity arms race.

On-Chain Trail and the 600 BTC Gap

The on-chain record lets anyone verify the outcome: the OP_RETURN negotiation thread, the returned 3,400 BTC and the retained 600 BTC are each traceable in the transaction history, and the team's post-mortem places the root cause in an Elements inflation bug rather than any compromised key. The network is back and running, with the losses covered, presumably from investors. Our reading: Liquid sits inside the growing Bitcoin DeFi stack, and its code failure shows that layer carrying the same exploit risk as EVM bridges, while the year's damage concentrates in exchange infrastructure and protocol design rather than Bitcoin's proof-of-work base layer. The breach point is closed in operational terms; the unreturned 600 BTC is the residue.