Liquid Restores Full Bitcoin Backing After $320 Million Elements Exploit
Liquid Network's federation said LBTC is again fully backed 1:1 by bitcoin reserves, roughly two months after a September exploit drained most of them. Blockchain records show Blockstream-linked deposits closed the gap, though the federation has not formally named every party that supplied the replacement bitcoin.
Written by CoinArticle’s AI Newsroom · from 4 cited sources. How we work
Story Updates
- Updated Nov 3, 2026, 11:58 AM: Reserves now confirmed at 1:1 via on-chain deposits; Samson Mow reportedly named Blockstream as the replacement bitcoin source.
- Updated Nov 3, 2026, 11:28 AM: Liquid federation confirms LBTC fully backed 1:1 again, two months after the exploit, with funding source still undisclosed.
Reserves Back to Full Backing
The Liquid Federation said on Tuesday that the network's bitcoin reserves have been fully restored, reestablishing 1:1 BTC backing for all LBTC, the token representing bitcoin on the sidechain. Blockchain records show approximately 4,268.95 BTC backing the equivalent LBTC supply when the shortfall was closed, and updated figures on November 3 showed 4,270.54 BTC backing the same supply.
The final two transfers into the federation reserve wallet, 300 BTC and 250 BTC, arrived on November 2, following smaller deposits of 2.5 BTC on October 27 and 50 BTC the next day. SideSwap, a federation member, confirmed the deposit sequence and reported that reserves matched circulating LBTC supply. Blockstream CEO Adam Back had earlier posted a dashboard screenshot showing assets matching liabilities at 100%, and the federation said users running their own Liquid nodes can verify reserves directly.
Who Supplied the Replacement Bitcoin
The federation's statement does not identify every party responsible for providing the replacement bitcoin. Samson Mow, a Liquid Federation board member, reportedly named Blockstream as the source when questioned, writing "As stated many times, Blockstream." Blockstream's earlier assessment had not addressed funding directly, and the distinction matters: returning stolen funds and supplying fresh bitcoin are different recovery methods with different implications for the peg.
Earlier reporting from The Defiant tied full reserves to a condition for restarting direct federation withdrawals, which remain suspended under enhanced operational controls.
What Was Exploited
On September 6, an attacker, who claimed to be a white-hat researcher whose identity and motives were not independently established, drew on a flaw in transaction verification within Elements, the open-source software underlying Liquid, to create roughly 4,000 LBTC without depositing matching bitcoin. The attacker converted those tokens into BTC through SideSwap, a federation member authorized to process withdrawals, reducing reserves from about 4,205 BTC to 197 BTC. CoinDesk had valued the drained bitcoin at about $320 million.
On September 7, the attacker returned 3,400 BTC after communicating with Blockstream through messages recorded on Bitcoin's blockchain. Blockstream's September assessment placed the remaining unrecovered amount at roughly 602 BTC. Liquid is a Bitcoin sidechain launched by Blockstream in 2018, in which users lock BTC with a federation and receive LBTC in return.
Security Measures and Governance
Adam Back listed three hardened lines of defense: refreshed peg-out authorization keys held in cold hardware wallets, disabled proof validation caches with a node bug fix, and consensus rules hardened to fail closed. He said the network has been through multiple third-party audits and, in an October 20 Bloomberg Television interview, that the hacked funds remained under investigation.
The federation said it is modernizing governance, introducing clearer responsibilities and oversight, and adding technical and operational safeguards, with more details promised in the coming weeks.
What to Watch
The restart of direct federation withdrawals remains the next observable milestone and would show whether the new controls operate as described. Formal disclosure of the replacement bitcoin's source, and the governance details the federation has promised, would resolve the main open questions.
Why It Matters
For Traders
LBTC is now reported 1:1 backed, but withdrawals remain restricted and the replacement funder is not formally named, so the peg carries residual risk until both are resolved.
For Investors
The episode shows sidechain peg security depends on federation solvency, custody practices and disclosure, a factor for multi-month assessment of bitcoin bridges.
For Builders
Teams building on Elements or Liquid should review the exploit fix, the hardened consensus rules and the new key custody setup before relying on the peg.
This article is for information only and is not financial advice. Read the full disclaimer.
