{"id":12909,"date":"2026-09-07T13:27:25","date_gmt":"2026-09-07T13:27:25","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=12909"},"modified":"2026-09-07T13:27:25","modified_gmt":"2026-09-07T13:27:25","slug":"tokens-created-out-of-thin-air-may-explain-how-320-million-in-bitcoin-left-the-liquid-sidechain","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=12909","title":{"rendered":"Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/liquid-network-bitcoin.jpg\" \/><\/p>\n<div data-single-article-content=\"\">\n<p>Researchers examining the roughly $320 million Liquid Network incident have identified an alleged failure in the software\u2019s transaction-validation cache, offering a more specific explanation for how unbacked tokens could be redeemed for real Bitcoin.<\/p>\n<p>Accounts also raise a deployment question. Mononaut said the exploited bug had entered Elements\u2019 master development branch the previous week but had never appeared in a tagged release. Liquid\u2019s federation functionaries apparently ran that code, he said, while other nodes rejected the invalid transactions.<\/p>\n<p>That deployment account remains unconfirmed by Blockstream in the available statements. If established, it would put the software rollout at the center of an incident in which valid signing credentials authorized the release of Bitcoin against allegedly bug-created L-BTC.<\/p>\n<p>Liquid is a Bitcoin sidechain whose L-BTC tokens are intended to be backed one-for-one by BTC held by its federation. As CryptoSlate previously reported, SideSwap said a customer submitted 4,000 L-BTC through its peg-out service on Sept. 6, prompting the release of approximately 3,996 BTC.<\/p>\n<div class=\"cs-article-embed\">\n<p> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw<\/h3>\n<\/p>\n<p> <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\"> <i class=\"fa-light fa-arrow-up-right\"\/> <\/span> <\/div>\n<p>Liquid said neither SideSwap\u2019s peg-out authorization key nor other federation keys had been compromised.<\/p>\n<p>The emerging technical accounts focus on how the tokens reached that withdrawal process.<\/p>\n<p>Calle described a flaw involving range proofs, which let nodes check that hidden transaction amounts fall within an allowed range without revealing those amounts.<\/p>\n<aside id=\"cs-inline-newsletter-1\" class=\"cs-inline-newsletter\" data-inline-newsletter=\"\" data-newsletter-placement=\"article-midpoint\" data-newsletter-pending-label=\"Joining\u2026\" data-newsletter-pending-status=\"Joining the Daily Brief\u2026\" data-newsletter-email-required-message=\"Before sending, please provide your email address.\" aria-labelledby=\"cs-inline-newsletter-1-title\" aria-describedby=\"cs-inline-newsletter-1-copy\">\n<div class=\"cs-inline-newsletter__inner\">\n<div class=\"cs-inline-newsletter__content\"> <span class=\"cs-inline-newsletter__eyebrow\"> <i class=\"fa-regular fa-envelope\" aria-hidden=\"true\"\/> The Daily Brief <\/span><\/p>\n<h2 id=\"cs-inline-newsletter-1-title\" class=\"cs-inline-newsletter__title\">The signal, before the noise.<\/h2>\n<p id=\"cs-inline-newsletter-1-copy\" class=\"cs-inline-newsletter__copy\">Start your day with the crypto stories moving markets, decoded by CryptoSlate\u2019s editors.<\/p>\n<\/div>\n<div class=\"cs-inline-newsletter__form-shell\">\n<p class=\"cs-inline-newsletter__form-heading\">One email. Everything that matters.<\/p>\n<p id=\"cs-inline-newsletter-1-privacy\" class=\"cs-inline-newsletter__privacy\">Free to join. Unsubscribe any time.<\/p>\n<p> <i class=\"fa-regular fa-circle-xmark\" aria-hidden=\"true\"\/> <span>Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n<p> <i class=\"fa-regular fa-circle-check\" aria-hidden=\"true\"\/> <span><strong>You\u2019re on the list.<\/strong> Your next Daily Brief is on its way.<\/span><\/p>\n<\/div>\n<\/div>\n<\/aside>\n<p>Liquid\u2019s confidential transactions require more than a check that inputs and outputs balance. A hidden negative output could otherwise offset a larger positive output, making newly created tokens appear to balance mathematically.<\/p>\n<p>Range proofs are intended to prevent that outcome. Because checking them is computationally expensive, nodes cache successful verification results for reuse.<\/p>\n<p>According to Calle\u2019s account, the attacker could construct an invalid output and proof that matched the cache key associated with a previously valid check. A node finding that cached result would skip the verification that should have rejected the inflationary output.<\/p>\n<p>Charles Guillemet endorsed the explanation, describing a crafted cache-key collision that allowed an invalid confidential transaction to bypass a range check. Calle cautioned that his account simplified the mechanism and could contain errors.<\/p>\n<p>A separate transaction reconstruction by Stu identified setup transactions followed by an allegedly invalid transaction at Liquid block 4,050,336. Stu said the transaction created approximately 3,996.0183 L-BTC before the subsequent withdrawal through SideSwap.<\/p>\n<p>Mononaut\u2019s account adds a distinction between the nodes that accepted the transaction and those that did not.<\/p>\n<p>He said federation functionaries accepted the exploit transactions, approved withdrawals, and continued building blocks. Other nodes, including those powering mempool\u2019s Liquid explorer, rejected the affected block. That would explain why an explorer following the rejecting nodes could omit transactions visible elsewhere.<\/p>\n<p>The reported divergence makes the affected software versions material to understanding the failure. A postmortem would need to establish which code functions ran, why it was deployed, and how its validation behavior differed from the nodes that rejected the block.<\/p>\n<p>Meanwhile, the actors controlling the withdrawn Bitcoin have described themselves as whitehats and conditioned the return of most funds on the bug being fixed across affected nodes. The available reporting does not establish a completed return or patch rollout.<\/p>\n<p>Recovering the Bitcoin would address the reserve shortfall. Explaining why federation nodes accepted the transactions and demonstrating that the corrected software rejects them would address the failure that allowed those reserves to leave.<\/p>\n<\/div>\n<p>Community,Featured,Hacks#Tokens #created #thin #air #explain #million #Bitcoin #left #Liquid #sidechain1788787645<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Researchers examining the roughly $320 million Liquid Network incident have identified an alleged failure in the software\u2019s transaction-validation cache, offering a more specific explanation for how unbacked tokens could be redeemed for real Bitcoin. Accounts also raise a deployment question. Mononaut said the exploited bug had entered Elements\u2019 master development branch the previous week but<\/p>\n","protected":false},"author":1,"featured_media":12910,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[5751,91,1871,6772,1433,2998,406,3003,744,234],"class_list":["post-12909","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-air","tag-bitcoin","tag-created","tag-explain","tag-left","tag-liquid","tag-million","tag-sidechain","tag-thin","tag-tokens"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=12909\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain\" \/>\n<meta property=\"og:description\" content=\"Researchers examining the roughly $320 million Liquid Network incident have identified an alleged failure in the software\u2019s transaction-validation cache, offering a more specific explanation for how unbacked tokens could be redeemed for real Bitcoin. Accounts also raise a deployment question. Mononaut said the exploited bug had entered Elements\u2019 master development branch the previous week but\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=12909\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-07T13:27:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/liquid-network-bitcoin.jpg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12909\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=12909\",\"name\":\"Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12909#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12909#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/1788787646_liquid-network-bitcoin.jpg\",\"datePublished\":\"2026-09-07T13:27:25+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12909#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=12909\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12909#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/1788787646_liquid-network-bitcoin.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/1788787646_liquid-network-bitcoin.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12909#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=12909","og_locale":"en_US","og_type":"article","og_title":"Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain","og_description":"Researchers examining the roughly $320 million Liquid Network incident have identified an alleged failure in the software\u2019s transaction-validation cache, offering a more specific explanation for how unbacked tokens could be redeemed for real Bitcoin. Accounts also raise a deployment question. Mononaut said the exploited bug had entered Elements\u2019 master development branch the previous week but","og_url":"https:\/\/cryptonews.uk.com\/?p=12909","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-09-07T13:27:25+00:00","og_image":[{"url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/liquid-network-bitcoin.jpg","type":"","width":"","height":""}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=12909","url":"https:\/\/cryptonews.uk.com\/?p=12909","name":"Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=12909#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=12909#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/1788787646_liquid-network-bitcoin.jpg","datePublished":"2026-09-07T13:27:25+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=12909#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=12909"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=12909#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/1788787646_liquid-network-bitcoin.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/1788787646_liquid-network-bitcoin.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=12909#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Tokens created out of thin air may explain how $320 million in Bitcoin left the Liquid sidechain"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/12909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12909"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/12909\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/12910"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}