Blockstream refused to grant the customary 10% reward to the individual responsible for the recent Liquid Network exploit, asserting that rewarding unauthorized access compromises the long-term integrity of Bitcoin infrastructure. The decision comes as 598 Bitcoin remains unrecovered, with the exploiter originally offering to return the majority of the funds in exchange for a 'white hat' immunity deal. By breaking the unwritten rule of the 10% bounty, Blockstream is signaling a zero-tolerance policy toward security breaches, even at the risk of permanent capital loss.
The exploit targeted a vulnerability in Liquid’s federation-based peg-out mechanism, allowing the attacker to divert 598 BTC before the system could be paused. While the decentralized finance (DeFi) space has historically embraced bounty negotiations to recover stolen assets, Blockstream’s status as a centralized infrastructure provider for the Bitcoin ecosystem complicates such deals. Management reportedly views the payment as a potential violation of modern anti-money laundering (AML) standards, which have tightened significantly in 2026.
From a regulatory perspective, US-based crypto firms face increasing pressure from the Treasury to avoid payments to anonymous actors, as these transactions can be classified as facilitating money laundering or bypassing sanctions. Blockstream’s stance likely reflects a desire to stay within the 'good graces' of US regulators, even if it results in a financial hit for the Liquid Network's liquidity providers. This move highlights a growing divide between 'code-is-law' crypto purists and institutional-grade infrastructure projects.
Market participants should watch for the exploiter's next move, as the refusal to pay the bounty often leads to 'malicious' behavior, such as attempting to mix the coins or sending them to burn addresses. For Bitcoin holders using sidechains, this event serves as a stark reminder of the security risks inherent in layered protocols. The immediate impact is a decrease in trust for the Liquid federation's security model and a potential increase in Bitcoin volatility if the missing funds are moved to exchanges.