Attackers Leave On-chain Message After $320 Million Exits Liquid Network

Someone pulled $319 million in Bitcoin (BTC) out of Blockstream’s Liquid network on Sunday. It cost 21 cents in fees. Then they left a note on the blockchain saying they were the good guys. While the internet calls it a heist, the chain says something stranger.

Liquid’s remaining coins are still fully covered, down to the fourth decimal place. We are aware of a security incident on @Liquid_BTC. Purported white-hat hackers have withdrawn ~4,000 BTC (~$320 million) from the Liquid Federation wallet.

The @Blockstream team is working on contacting them on-chain with a signed message.What we know so far is that the funds…— Liquid Network 🌊 (@Liquid_BTC) September 6, 2026 Follow us on X to get the latest news as it happens  $320M Crypto Reserve Moves, But the Wallet Left a Strange Message The first move cleared at 14:06 UTC, releasing 3,996 coins to an address nobody had ever used before.

That was 95% of everything the network held. Four hours later the money moved again. The sender paid 269 satoshis, about 21 cents, and attached a message anyone can read. Actors left a message “we are whitehats. contact us on chain”.