Blockstream Refuses Ransom for Return of $47M in Bitcoin from Liquid Hack: 'It Is Theft'

CN
Decrypt
Follow
6 hours ago

Blockstream has refused to pay for the return of the $47 million in Bitcoin still missing from the Liquid Network, abandoning days of negotiation with the people who took it.


"Taking assets without authorization and withholding their return is a crime, not responsible disclosure," the company said on Friday. "It is not white-hat activity. It is theft."



Around 4,000 BTC was drained from the sidechain on Sunday, worth about $320 million. The attackers returned 3,400 BTC on Monday, leaving 598.5 BTC at the address they withdrew to, where it remains unmoved.


A flaw in how Liquid nodes cache range proof verifications let the attackers mint unbacked L-BTC and swap it for reserve Bitcoin through SideSwap, a federation member holding a peg-out authorization key. The reserve fell to 197 BTC. Blockstream patched the bridge nodes within ten hours and shipped Elements v23.3.4 on Wednesday. Liquid resumed producing blocks and processing transactions Thursday, though peg-outs stay disabled as a precaution while "the final stage of recovery" continues. It warned separately of scammers targeting node operators with fake update sites.



Myriad: Bitcoin's next move? Click to make your prediction.

Tuesday's incident report from Liquid struck a different tone, saying it was coordinating "with the white hat hacker" to restart the network.


Its participation in those talks "should not be mistaken for acceptance of the actions taken nor of the terms being demanded," Blockstream said. Those terms were public. In a Bitcoin transaction on Wednesday, the exploiters wrote that Blockstream had allocated "only $1.5M (maybe even 0) to secure $5B assets," calling it "a flagrant neglect of security." They wanted 10% "using your own money as bug bounty," or "you will cause all your holders a 15% loss for your irresponsibility and stinginess."


A precedent Blockstream won't set


Blockstream will not be "a party to the precedent that open-source software developed for the good of the Bitcoin community should subject its developers to paying a ransom that far exceeds their economic participation," it said.


Nor will it cover the shortfall from users. "Bitcoin is hard money and can't be minted without costs," it said. "Bitcoin doesn't haircut users to pay a ransom."


Instead it will pursue "every lawful avenue" with law enforcement, exchanges and forensic specialists, should the funds not be returned.  "Transactions do not disappear, and neither does the evidence they leave behind," it warned, closing: "Return the bitcoin."


免责声明:本文章仅代表作者个人观点,不代表本平台的立场和观点。本文章仅供信息分享,不构成对任何人的任何投资建议。用户与作者之间的任何争议,与本平台无关。如网页中刊载的文章或图片涉及侵权,请提供相关的权利证明和身份证明发送邮件到support@aicoin.com,本平台相关工作人员将会进行核查。

Share To
APP

X

Telegram

Facebook

Reddit

CopyLink