|

Supposed White-Hat Hackers Drain $320 Million in BTC From Liquid Network, Say They’ll Return It After Fix

Bitcoin Layer 2 community Liquid Network has reported a safety incident in which purported white-hat hackers withdrew roughly 4,000 BTC, price $320 million, from the Liquid Federation pockets.

Blockstream is making an attempt to contact the events concerned by means of a signed on-chain message.

Network Bug Must Be Fixed First

In an replace, Liquid said the funds have been withdrawn utilizing the SideSwap PAK (Peg-out Authorization Key) however said that the important thing itself was not compromised and that no different keys have been in jeopardy. Crypto exchanges have been knowledgeable and have already suspended, or are making ready to droop, LBTC deposits and withdrawals.

Liquid stated different property on the community, together with USDT, DePix and real-world property, weren’t affected. The community has additionally briefly disabled its bridge nodes, which means new transactions can’t be submitted. As a consequence, the sidechain is successfully paused whereas the difficulty is being addressed.

“Liquid wallets can be impacted, and we’re sorry for any inconvenience. Federation members are actively engaged on resolving this so we will restore regular community exercise.”

The public back-and-forth between Blockstream and the celebration claiming to be the white-hat hacker behind the withdrawal is constant on-chain. According to Samson Mow, the hacker seems to favor speaking publicly fairly than through electronic mail, and is posting messages through Bitcoin transaction knowledge.

They even requested Blockstream to make contact on Signal at @m671aw.70″

The alternate started at 11:30 AM PDT, when the hacker wrote, “we’re whitehats. contact us on chain.” Blockstream responded at 12:31 PM on September 6 and requested the hacker to contact its safety workforce by electronic mail. Later, Blockstream despatched an encrypted, PGP-signed message to the hacker’s key.

At 7:20 PM, the hacker stated they deliberate to ship many of the funds again and requested whether or not a specified tackle was acceptable. About an hour later, they stated the bug wanted to be fastened first, and added,

“The chain is underneath threat at newest commit proper now. Make certain each node is patched. Then we are going to switch the cash again safely after confirming the repair.”

Blockstream replied, “Yes, thanks,” at 8:30 PM. As of 9:12 PM PDT, round 3,998.5 BTC remained unmoved. There have been no additional messages from both aspect.

Unusual Hacker Behavior

Ledger CTO Charles Guillemet was skeptical of the white-hat declare and identified that reputable safety researchers wouldn’t sometimes drain a bridge after which ask to be contacted on-chain.

He drew parallels with the Ronin hack, in which attackers stole round $625 million after compromising validator keys, and the Euler exploit, the place the attacker sought to barter the return of funds after the theft.

The transfer to Signal additionally did little to vary Guillemet’s opinion that the habits was not like traditional white-hat exercise. Despite this, the exec famous that felony teams don’t sometimes attain out to their victims both.

The submit Supposed White-Hat Hackers Drain $320 Million in BTC From Liquid Network, Say They’ll Return It After Fix appeared first on CryptoPotato.

Similar Posts