---
title: "Liquid Network Attacker Returns 3,400 BTC After September 6 Exploit"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/299364449.md"
description: "The attacker behind the September 6 Liquid Network exploit has returned 3,400 BTC, approximately 85% of the stolen assets. Blockstream refused to pay ransom for the remaining 598.50 BTC and demanded its return. L-BTC redemption remains suspended, with Sideswap unable to process redemptions. Founder Adam Back warned holders against selling L-BTC at a discount, affirming the 1:1 backing by Bitcoin reserves. The attacker's wallet continues to receive scam messages and address poisoning attempts."
datetime: "2026-09-17T20:43:52.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/299364449.md)
  - [en](https://longbridge.com/en/news/299364449.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/299364449.md)
generator: "portal-rs"
---

# Liquid Network Attacker Returns 3,400 BTC After September 6 Exploit

The attacker behind the Liquid Network exploit returned 3,400 BTC after the vulnerability attack on September 6, about 85% of the transferred assets. It still holds 598.50 BTC, worth more than $45 million, according to Odaily. Blockstream, which maintains Liquid Network, refused to pay a ransom for the remaining assets and demanded the return of the related bitcoin. The network shows 4,234.76 L-BTC in circulation and 3,632.23 BTC in reserves. The L-BTC redemption function has not yet been restored, and Sideswap said it is currently unable to redeem. Blockstream founder Adam Back said L-BTC will be backed by bitcoin reserves at a 1:1 ratio and warned holders not to sell L-BTC over the counter at a discount. Blockstream has not yet issued an announcement saying redemption is live. The attacker’s wallet has continued receiving on-chain messages and has been targeted by address poisoning attacks and scam messages using similar-looking addresses to 诱 uce transfers.

### Related Stocks

- [GBTC.US](https://longbridge.com/en/quote/GBTC.US.md)
- [IBIT.US](https://longbridge.com/en/quote/IBIT.US.md)
- [ARKB.US](https://longbridge.com/en/quote/ARKB.US.md)
- [BITB.US](https://longbridge.com/en/quote/BITB.US.md)
- [FBTC.US](https://longbridge.com/en/quote/FBTC.US.md)
- [BITO.US](https://longbridge.com/en/quote/BITO.US.md)
- [BRRR.US](https://longbridge.com/en/quote/BRRR.US.md)
- [BTCO.US](https://longbridge.com/en/quote/BTCO.US.md)
- [BTCW.US](https://longbridge.com/en/quote/BTCW.US.md)
- [HODL.US](https://longbridge.com/en/quote/HODL.US.md)
- [EZBC.US](https://longbridge.com/en/quote/EZBC.US.md)
- [03008.HK](https://longbridge.com/en/quote/03008.HK.md)
- [03042.HK](https://longbridge.com/en/quote/03042.HK.md)
- [03430.HK](https://longbridge.com/en/quote/03430.HK.md)
- [BTCE.DE](https://longbridge.com/en/quote/BTCE.DE.md)

## Related News & Research

- [$320 million: Ruined by a single cache key](https://longbridge.com/en/news/299443247.md)
- [Farage-backed treasury firm Stack BTC plans expansion with $16M talks for Direct Bullion](https://longbridge.com/en/news/299073040.md)
- [ViaBTC Partners with Mempool to Expand Access to BTC Transaction Acceleration Services](https://longbridge.com/en/news/299126618.md)
- [Osmosis Took 74 Days To Discover A 40-BTC Nomic Exploit That Left Its Bitcoin-Backed Asset 36% Unbacked](https://longbridge.com/en/news/298903281.md)
- [Stacks launches first institutional Bitcoin bond with staking program](https://longbridge.com/en/news/299529063.md)

---
> **Disclaimer: This article is for reference only and does not constitute any investment advice.**