Blockstream Just Refused $50M to a Hacker — and Put 600 BTC on the Line to Prove It
A hacker who exploited Blockstream's Liquid Network, minted 4,000 unbacked L-BTC out of thin air, and walked away with nearly 3,996 real Bitcoin is now demanding $50 million to call it even — and Blockstream said no.
That refusal puts roughly 600 BTC, worth approximately $50 million at current prices, in direct jeopardy. This is not a drill. Blockstream is publicly drawing a line in the sand against a sitting attacker who still holds leverage over the situation.
What Actually Happened on September 6
The exploit was surgical. A vulnerability inside the Liquid sidechain allowed the attacker to fabricate approximately 4,000 L-BTC with no real Bitcoin backing them. The attacker then redeemed those synthetic tokens for nearly 3,996 actual BTC — real, on-chain Bitcoin that walked straight out the door.
Blockstream managed a partial recovery, clawing back a portion of the stolen funds. But the attacker still controls a significant slice of the haul. Now they want a formal $50 million bounty payment — essentially a ransom dressed in bug-bounty clothing — in exchange for returning what remains.
Why Blockstream Is Saying No
Blockstream's refusal is a calculated power move with serious financial risk attached. The company appears to be signaling that paying attackers retroactive bounties for active exploits normalizes extortion across the entire industry. If you mint unbacked tokens, drain the chain, and then demand a fee for cooperation, you are not a white hat. You are a criminal with a PR strategy.
Paying would also set a precedent every future attacker would study closely. Blockstream seems to understand that the cost of paying this bounty could dwarf the cost of refusing it — across the whole ecosystem, not just their balance sheet.
But that calculation comes with real risk. The 600 BTC still in play is not a rounding error. At current prices, this is one of the largest active standoffs between a crypto infrastructure company and a sitting attacker in recent memory.
What Crypto Holders Should Watch Right Now
This story has three pressure points worth tracking closely.
First, watch Liquid Network liquidity and L-BTC peg stability. Any sign of further stress on the sidechain could trigger withdrawals fast.
Second, watch whether other major protocols quietly update their bounty policies in the next 30 days. Blockstream's refusal will force that conversation industry-wide.
Third, and most importantly, watch Bitcoin price sensitivity to custodial sidechain risk. If this standoff escalates, it could spark a broader conversation about whether Layer 2 Bitcoin infrastructure is ready for institutional capital.
Blockstream is gambling that holding the line is worth 600 BTC. The rest of the industry is watching to find out if they are right.