Liquid Network Restores Full LBTC Backing Two Months After $320M Hack

Liquid Network, the Bitcoin sidechain built by Blockstream, is fully backed again. The Liquid Federation said on November 3 that it had restored its reserves and brought the LBTC token back to 1:1 backing, two months after about 4,000 BTC drained out. For holders of wrapped bitcoin, it is the first proof that a breached bridge can be repaired without permanently losing its peg.

What the federation actually restored

LBTC is a token issued against bitcoin locked in a wallet run by the federation. A group of exchanges and crypto companies operates the network. It says the reserve deficit now stands at 0.00 BTC. Blockstream CEO Adam Back posted a screenshot of the dashboard showing assets covering liabilities at 100%.

Anyone running their own Liquid node can check this. The federation stressed that point separately. A few weeks ago, BTC to LBTC swaps at 1:1 were already brought back through participating providers. Full reserve restoration was the next step.

How it started in September

On September 6, unknown people calling themselves white-hat hackers pulled about 4,000 BTC, roughly $320 million at the time, from the federation wallet. They talked to Blockstream through PGP-signed messages embedded right inside Bitcoin transactions. A strange channel for "ethical" disclosure.

The next day they returned 3,400 BTC (about $269 million) after Blockstream said the bridge nodes had been patched. The rest, roughly 598 BTC, they kept. Ledger CTO Charles Guillemet remarked that if this was a negotiated reward, it looked more like extortion than white-hat hacking. Blockstream refused to pay a ransom and called the move a crime, not responsible disclosure.

What the federation left unexplained

The biggest question is where the cover came from. The federation did not say how the gap left by the hack was closed. Whether Blockstream put in the money, the federation members did, or it was solved some other way is unknown.

For the market that is no small detail. Whoever pays for the losses also sets the rules for the next incident. For now users have a dashboard they can check against their own node, and the federation's word.

• It is unclear whether Blockstream itself or the federation members covered the deficit.
• Centralized control over the peg-out keys that release BTC has not gone away, even though the keys were refreshed.
• A new governance structure is promised, but details will only arrive in a few weeks.

Back's three lines of defense

Asked on X what would stop a repeat, Back listed three layers. First, the peg-out authorization keys were refreshed and now sit on cold hardware wallets. Second, proof validation caches were disabled and a bug in the nodes was fixed. Third, consensus rules were tightened so the system fails closed instead of letting a bad operation through. The network has also gone through several third-party audits.

"Treat with suspicion (don't trust, verify) AI suggested fixes."

Adam Back, CEO of Blockstream, from a reply on X, November 3, 2026

The mention of AI is not random. On October 20, in an interview with Bloomberg Television, Back talked about "a wave of AI-assisted security analysis" over recent months: such tools help write and secure code, but they also find defects in it. That has hit many companies in the sector. The federation's statement does not confirm that AI played a part in the Liquid breach itself.

What the market takes from this

The federation is also reworking its governance, promising clearer responsibilities, oversight and extra technical and operational safeguards. For the wrapped bitcoin market the lesson is down to earth. The 1:1 guarantee rests on keys and the people who control them, not on the token's code. At Kurslog we read stories like this through liquidity: a wrapped asset is worth exactly as much as the trust in its reserve.