Threshold Network's tBTC bridge partially resumed onchain operations after a nine-day security pause triggered by a critical Linux kernel vulnerability that could allow remote code execution on unpatched servers. Threshold stated it found no evidence the flaw was exploited against tBTC nodes.
An Aave reserve holding approximately $120 million in tBTC on Ethereum remains frozen to new deposits and borrowing. Aave imposed the freeze on Oct. 31 to prevent additional exposure while redemptions were unavailable. Existing users can still withdraw and repay loans.
Threshold announced the bridge's underlying network began restarting on Nov. 7, with security-patched node operators in the process of reconnecting. These independent operators collectively authorize Bitcoin movements and process deposits and redemptions. Requests submitted before the Oct. 30 shutdown are expected to process as more operators come online.
The tBTC application will not accept new deposits, minting, or redemptions until sufficient nodes return. Threshold did not specify a timeline for resuming new operations.
Approximately 4,320 BTC remains in bridge wallets, compared to about 4,185 tBTC in circulation. No unauthorized Bitcoin transfers or token minting occurred during the pause.
Aave risk provider LlamaRisk said it plans to propose restoring the frozen reserve once Threshold's operations return to normal status.
