How much Bitcoin was returned by the Liquid Network bridge hackers?

Hackers have returned approximately $270 million in Bitcoin after a $320 million exploit on the Liquid Network bridge. While the majority of funds were recovered following a node patch by Blockstream, roughly 600 BTC remains missing.
How much Bitcoin was returned by the Liquid Network bridge hackers?

Hackers have successfully returned approximately $270 million in Bitcoin to the Liquid Network following an exploit that originally saw $320 million drained from the protocol’s bridge. The return of funds was initiated after Blockstream developers successfully patched the bridge nodes and communicated with the actors via on-chain messaging. Despite this significant recovery, nearly 600 BTC remains outstanding and has not yet been returned to the network's control.

The exploit targeted vulnerabilities in the bridge nodes, which are essential for moving assets between the Bitcoin mainnet and the Liquid sidechain. Blockstream’s proactive response included a direct on-chain message to the hackers, confirming that the security flaw had been neutralized. This successful negotiation highlights an ongoing trend in 2026 where developers use direct on-chain communication to facilitate the return of stolen assets, often treating the retained portion as a de facto white-hat bounty.

From a regulatory perspective, this incident is expected to attract scrutiny from US authorities, including the SEC and CFTC, which have become increasingly focused on the security of cross-chain infrastructure. As Bitcoin-based sidechains and Layer-2 solutions gain institutional traction in 2026, the resilience of these bridges is a top priority for federal regulators concerned about consumer protection and systemic risk. This breach may lead to renewed calls for standardized security audits for any protocol acting as a custodian for bridged Bitcoin.

Market implications remain mixed; while the return of $270 million prevents a massive liquidation event, the fact that a high-profile sidechain was compromised weighs on investor confidence in bridge technology. Analysts are closely watching the remaining 600 BTC to see if they are moved toward mixers or exchanges, which would signal a breakdown in negotiations. Investors should monitor Blockstream’s upcoming technical post-mortem and the potential for increased volatility in Bitcoin-linked decentralized finance (DeFi) protocols.

Editorial method

This report is based on the linked source and is labeled with its publication date, provider, category and market-impact assessment. Market interpretation is informational, not investment advice.