Liquid Federation: Disclosed the details of approximately 4,000 BTC vulnerability incidents

According to Bitcoin News monitoring, Liquid Federation released an incident report stating that attackers exploited a cache vulnerability in the Elements range proof verification to mint approximately 4,000 unbacked L-BTC, which were then exchanged for real BTC through the authorized exit anchoring path via SideSwap. The Liquid authority considered the related transactions valid and released approximately 4,000 BTC from the federal reserve.

Before the incident, Liquid held about 4,205 BTC, and the minimum reserve dropped to 197 BTC before operations were suspended. The self-identified white-hat attackers have since returned 3,400 BTC, with about 598.5 BTC still unreturned. No private keys were leaked, and the exit anchoring mechanism itself operated as designed. Liquid is currently still offline, and Blockstream is preparing to release an emergency version of Elements v23.3.4 and is working to restore the network with 1:1 Bitcoin reserve support.