ZeroHour
TechCrunch · Securitypublished ()ingested Zack Whittaker

A hacker stole $340M in a crypto heist, then returned most of it

highExploit / PoC exploited in the wildimportance 66
AI summary · glm-5.3-flash

A hacker exploited a bug to steal about 4,000 BTC (~$340M) from Blockstream's Liquid Network, then returned roughly 3,400 BTC after the bug was fixed.

A hacker exploited a bug to withdraw roughly 4,000 bitcoins worth about $340 million from Liquid Network, a settlement service launched in 2018 by crypto firm Blockstream and used by several cryptocurrency exchanges. Liquid Network paused operations, and the hacker, described as a white hat, offered to return the funds once the bug was fixed. Former Blockstream executive Samson Mow said the bug was fixed and about 3,400 BTC (~$293M) returned, leaving roughly 600 BTC (~$47M) under the hacker's control pending further security improvements. Rekt's leaderboard ranks the heist among the largest cryptocurrency thefts to date.

  • ~4,000 BTC (~$340M) stolen from Liquid Network via bug exploitation
  • Hacker offered to return funds after the bug was fixed; ~3,400 BTC returned
  • ~600 BTC (~$47M) remain under hacker control; operations paused pending fixes
  • Ranked among the largest cryptocurrency thefts on Rekt's leaderboard
Full article226 words · extracted from techcrunch.com · click to collapse

In Brief

Posted:

7:11 AM PDT · September 8, 2026

a sea of patterned green bugs with yellow bitcoin logos on them on a red background
Image Credits:Samuil Levich / Getty Images

A hacker stole thousands of bitcoins worth about $340 million in a heist at a settlement exchange used by several cryptocurrency exchanges, representing one of the largest known thefts of crypto this year.

Liquid Network, launched in 2018 by crypto firm Blockstream, said in a post on X on Sunday that a “white hat” hacker stole the funds from the network’s wallet, and that it has paused operations until the incident is resolved.

It’s not yet known who the hacker is, but crypto media reports that the hacker allegedly exploited a bug to withdraw the funds. The hacker said they would return the funds if Blockstream fixed the bug.

Former Blockstream executive Samson Mow said in a post on X on Monday that the company had fixed the bug, and around 3,400 of the roughly 4,000 stolen bitcoins had been returned. The remaining about 600 bitcoins (about $47 million) were still under the hacker’s control.

Mow said operations will remain paused until additional fixes and security improvements are made prior to restarting.

The theft ranks as one of the largest heists of digital funds to date, according to the Rekt leaderboard, which tracks cryptocurrency thefts.

Topics

Subscribe for the industry’s biggest tech news

Latest in Security

Text extracted automatically; images, tables and formatting may be missing. Original: https://techcrunch.com/2026/09/08/a-hacker-stole-340m-in-a-crypto-heist-then-returned-most-of-it/