The Liquid Network has recovered 3,400 Bitcoin following a security incident, reclaiming 85 percent of the 4,000 BTC initially stolen from the layer-two sidechain. But 598 bitcoin:native tokens—worth $46.9 million at $78,497 per BTC—remain unrecovered. Blockstream, the primary develo confirmed the partial recovery as negotiations continue. The network stays paused, blocking user access and liquidity across the ecosystem.
The recovery pattern points to a white hat operation: the perpetrators voluntarily returned the majority rather than dumping or mixing the funds. That cooperation is rare in digital assets and suggests ethical hackers or a negotiated settlement. Liquid operates as a federated sidechain built for faster, more confidential Bitcoin transactions and institutional settlement. Security relies on a federation of member companies who collectively manage multisig custody of pegged Bitcoin.
The network halt directly impacts holders of bitcoin:native. These tokens are pegged one-to-one with Bitcoin in federation custody, and the pause freezes all movement. The incident exposes a core risk: centralized control points within otherwise decentralized systems. Even federated models create vulnerability. Blockstream's negotiations now target recovery of the remaining 598 bitcoin:native—material to network integrity and user confidence.
On-chain wallet flows will reveal where the 598 unrecovered bitcoin:native are headed. While the returned 3,400 BTC went to known federation addresses, the missing funds could move to mixers, privacy protocols, or exchanges. Tracking on a privacy-focused sidechain still offers investigators some transparency. This breach will force re-evaluation of security across other federated sidechains and layer-two solutions.
For Liquid participants, the math is clear: 85 percent recovery mitigates damage, but $46.9 million in outstanding losses is material. The immediate questions are network resumption timing and whether Blockstream secures the final 598 bitcoin:native. Until operations resume, Liquid's role in Bitcoin infrastructure remains compromised.