Blockstream Rejects Hacker's $50M Bounty Demand After Liquid Sidechain Theft
Blockstream is refusing to pay approximately 600 Bitcoin (roughly $50 million) to the attacker who exploited its Liquid sidechain in September, stealing around 4,000 BTC. The dispute centers on whether the hacker should receive a bounty for returning part of the stolen funds.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
The Theft and Recovery
On September 6, a vulnerability in Blockstream's Liquid sidechain allowed an attacker to create approximately 4,000 unbacked L-BTC tokens and withdraw roughly 3,996 real Bitcoin through the bridge. Rather than liquidating or moving the funds, the attacker has since initiated partial recovery, returning some of the stolen Bitcoin to Blockstream.
The Bounty Dispute
The attacker is demanding approximately 600 Bitcoin—valued near $50 million at current prices—as a reward for returning the remaining stolen funds. Blockstream has rejected this demand, according to CryptoSlate. The disagreement reflects a broader question within the cryptocurrency industry: whether and how much to compensate someone who exploits a vulnerability but returns the stolen assets without ransom demands or public extortion.
Stakes and Context
Blockstream's refusal to pay the requested bounty represents a significant bet on its position. By rejecting the demand, the company is gambling that either the hacker will return the funds voluntarily, external pressure will convince them to do so, or the dispute will result in law enforcement involvement. The incident highlights tensions between bug-bounty conventions, which typically reward security researchers for disclosing vulnerabilities responsibly, and situations where an attacker has already stolen funds and is negotiating from a position of control over the assets.
Why It Matters
For Traders
The unresolved status of 3,996 stolen BTC creates uncertainty about potential market impact if funds are suddenly moved or returned en masse.
For Investors
The incident demonstrates sidechain bridge risks and signals how major infrastructure companies respond to exploits, informing decisions about which protocols to trust with capital.
For Builders
The dispute sets a precedent for how the industry handles partial restitution and bounty negotiation, influencing future bug-bounty policies across sidechains and bridges.
This article is for information only and is not financial advice. Read the full disclaimer.
