Mystery $320M Bitcoin Move Raises Questions About Liquid Network Security

On September 6, a large peg-out transaction moved approximately 4,200 BTC (about $320 million) from the Liquid Network, a Bitcoin sidechain operated by Blockstream, back to the main Bitcoin blockchain. Embedded in the transaction was an OP_RETURN message, a small data field attached to Bitcoin transactions, stating that the movement was carried out by 'white hats' and inviting contact. Blockstream has not issued any public statement about the event.

The Liquid Network relies on a security model called a Strong Federation, requiring 11 of 15 trusted parties to approve any transfer, plus separate Peg-out Authorization Keys designed to guard against compromised participants. Peg-outs are normally processed in batches taking 11 to 35 minutes, so a transfer of this scale moving through without apparent disruption raises serious questions about whether the layered security controls were properly followed or somehow bypassed.

At this stage it is not confirmed whether this was an authorised insider action, a genuine security exploit, or something else entirely. Until Blockstream or the Liquid Network federation provides an official explanation, the incident remains unresolved and the source of authorisation for the transfer is unknown.