Blockstream, the company that operates the Liquid Bitcoin sidechain, announced it will not comply with a ransom demand from the group that stole approximately 4,000 BTC – valued at about $47 million – in a high‑profile hack. With roughly 598.5 BTC still missing, Blockstream said it will hand the case over to law‑enforcement authorities rather than negotiate a payment.

The Liquid hack and ransom demand

According to reports from several outlets, including Bitcoin Magazine, a group of white‑hat hackers compromised the Liquid network earlier this year, gaining control of the sidechain’s hot wallets and moving more than 4,000 BTC to external addresses. The perpetrators later demanded a ransom for the return of the remaining coins, a move that prompted intense scrutiny from the crypto community.

Facebook Data Center Server Board
Facebook Data Center Server Board (Image: Wikimedia Commons)

Blockstream's refusal and recovery effort

Blockstream responded that the incident is unequivocally "theft" and that paying a ransom would establish a dangerous precedent for future attacks. The company emphasized its commitment to pursuing criminal prosecution and warned that it will cooperate fully with authorities.

"It is theft," Blockstream said in a statement, adding that it will not negotiate with criminals.

The firm also disclosed that it has already recovered roughly 85% of the stolen Bitcoin, leaving the 598.5 BTC – still worth around $47 million – unrecovered.

Open Compute Server Front
Open Compute Server Front (Image: Wikimedia Commons)

Market context and industry reaction

The hack comes at a time when the broader cryptocurrency market is navigating a period of relative stability after months of volatility, with Bitcoin trading within a narrow band and investors closely monitoring security risks on ancillary networks such as sidechains. Analysts note that incidents of this scale can erode confidence in secondary layers that promise faster transactions and lower fees, potentially slowing adoption.

Industry observers have praised Blockstream’s decision not to pay a ransom, arguing that capitulating to extortion could incentivize further attacks on high‑value custodial platforms. However, some commentators pointed out a discrepancy in reported figures: while most outlets cite a $47 million loss, one source referenced a $320 million figure, highlighting the challenges of accurate valuation in the fast‑moving crypto space.

Implications for regulation and security

Blockstream’s stance underscores a growing push for clearer regulatory frameworks around cryptocurrency custodianship and cyber‑crime response. By involving law enforcement, the company aligns with a broader industry trend of seeking legal recourse rather than private settlements.

Security experts say the incident serves as a reminder that sidechains, despite offering technical advantages, may present additional attack surfaces. They call for stronger audit mechanisms, multi‑signature controls, and real‑time monitoring to mitigate similar breaches.

As the investigation proceeds, the fate of the remaining 598.5 BTC remains uncertain. Blockstream’s refusal to pay the ransom signals a firm policy that may shape how future crypto‑related extortion attempts are handled, balancing the immediate financial loss against long‑term ecosystem integrity.

Market Snapshot

AssetPrice24hMarket Cap
Bitcoin BTC$77,380+0.26%$1554.0B
Ethereum ETH$2,538+3.21%$309.8B
BNB BNB$726.96+1.86%$96.8B
XRP XRP$1.37+0.86%$85.9B
Solana SOL$102.81+2.90%$60.3B
Dogecoin DOGE$0.0846+0.60%$13.2B
Cardano ADA$0.207-0.69%$7.8B

Live data: CoinGecko — 2026-09-11 21:22 UTC