Threshold Network's tBTC bridge has resumed partial on-chain operations following a security pause initiated Oct. 30. The nine-day halt addressed a critical Linux kernel vulnerability that could permit remote attackers to execute code on unpatched servers.
Threshold confirmed Sunday that the bridge's underlying network was restarting. Security-patched node operators are reconnecting to collectively authorize Bitcoin movements and process deposits and redemptions. The project found no evidence the vulnerability was exploited against tBTC nodes.
While the bridge is active, an Aave reserve holding approximately $120 million in tBTC remains frozen. Aave implemented this restriction Oct. 31 to prevent additional exposure while tBTC redemptions were unavailable. The freeze stops new tBTC deposits and prevents the token from adding borrowing power.
Existing Aave users can still withdraw and repay loans against their tBTC holdings. LlamaRisk, Aave's risk provider, plans to propose restoring the reserve once Threshold's operations normalize.
Threshold expects requests submitted before the Oct. 30 shutdown to process as more node operators return online. The application will not accept new deposits, minting, or redemptions until a sufficient number of nodes are fully operational. Threshold has not announced a specific restart date for these functions.
Roughly 4,320 BTC remains in bridge wallets, backing about 4,185 tBTC currently in circulation. Threshold reported no unauthorized Bitcoin transfers or token minting during the security incident.
