The attacker returned 3,400 BTC after on-chain discussions. However, it withheld the balance while seeking a 10% bounty. Blockstream said it “will not pay a ransom for the return of stolen funds.”
Bitcoin Red Team plans to publish its disclosure record after Blockstream restores normal operations and releases a postmortem. Former Blockstream security chief Samson Mow disputed Calle’s account and said Blockstream ignored no emails.
(adsbygoogle = window.adsbygoogle || []).push({});Blockstream CEO Adam Back said two issues interacted to create the exploited condition. He described both issues as non-critical.
Back, said developers, introduced the exploitable bug through an incorrect fix for a separate vulnerability found using artificial intelligence. He also pointed to Blockstream’s history of open security collaboration and code review.
Blockstream has not yet published the promised technical postmortem. Available statements do not establish whether Bitcoin Red Team reported the exact exploit path or a related weakness.
Liquid resumed block production on Sept. 10, followed by transaction processing. Peg-outs stayed disabled as a precaution while federation members continued their security review.
Blockstream said it would involve law enforcement, exchanges, service providers, and forensic specialists if the remaining bitcoin was not returned.
