Liquid hack recap - Part 1
Bitcoin's oldest sidechain just lost ~95% of its reserve.
~4,019 BTC pegged out of Liquid's federation in a single tx (block 965,783):
No stolen key. The peg-out was "valid."
The $320M didn't get "stolen", they got minted.
A rangeproof-cache bug in Elements let the attacker conjure unbacked L-BTC, then peg it out for real BTC through the front door.
Their on-chain note: "we are whitehats. contact us on chain"
Right now ~3,998 BTC (~$320M) sits in one address while Liquid's self-described "white hat" and Blockstream negotiate entirely through messages buried in Bitcoin transactions.
Watch it move: https://www.blockchain.com/explorer/addresses/btc/bc1ql4mfu6aundtkksxklfajs2h3t9nzcd6gyqjlte
Until it does, the promise is just text in an OP_RETURN.
[link] [comments]
from Bitcoin - The Currency of the Internet https://ift.tt/gXByYpF
No comments