Following the exploit on Sept. 6, 2026, Liquid Network is now undergoing a strict verification process. The Bitcoin layer-2 network has initiated an independent security audit of its Elements software update, version 23.3.4. Third-party testing has been established as an essential step before the network restores Bitcoin withdrawal or peg-out functionality to its users.
The suspension of peg-out services is a direct consequence of the attack earlier last month. At the time, the attacker exploited a network consensus flaw to mint 4,000 unbacked LBTC without depositing collateral. These newly minted synthetic assets were then used to withdraw real reserve Bitcoin from Liquid’s treasury.
Addressing the Cryptographic Proof Vulnerability
Investigations revealed that the vulnerability originated directly from the rangeproof verification caching system. Elements operates as the open-source blockchain platform supporting Liquid, relying on confidential transactions. This technical feature conceals transfer amounts between users through cryptographic proofs.
The issue arose from the removal of transaction context in the rangeproof verification cache key. This technical flaw allowed valid verification results from previous transactions to be reused without authorization. Through caching manipulation, the attacker misled validators into recognizing 4,000 Bitcoin in collateral as deposited. The Elements v23.3.4 update aims to patch this cache vulnerability, and independent auditors are currently testing its resilience.
Securing Cold Storage Vaults
Multi-layered fixes are also being implemented beyond software components. Liquid Federation is simultaneously updating its list of Peg-out Authorization Keys (PAK), an essential safeguard governing the outflow of Bitcoin from the network’s treasury.
During the overhaul, operators are ensuring that all Bitcoin recipient keys remain securely held in cold storage. Moving them to offline hardware eliminates potential avenues for additional exploitation while the main network is being patched.
To date, Liquid Network management has not released a definitive timeline for when withdrawals will resume normal operations. They stressed that completing the external audit and overhauling the PAK keys are mandatory prerequisites before reopening peg-out services. For institutions safeguarding substantial user funds, extending maintenance downtime remains a rational choice over taking operational risks on an uncertified system.
Reported by crypto.news.
Also read: Network Halted for 24 Hours, Cosmos Hub Validators Recover 1.23 Million Stolen ATOM - Here is How
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
