Security · Analysis
The 598 Bitcoin Nobody Will Call a Bounty
Blockstream got 85 percent of the Liquid federation's reserve back after negotiating in public, on the Bitcoin blockchain, with the people who took it. The 598.5 BTC that stayed behind has no disclosed agreement attached to it — and nobody involved will say what it is.
The people who moved roughly 4,000 bitcoin out of the Liquid federation on Sunday sent most of it back on Monday. Per CoinDesk, 3,400 BTC returned to the federation wallet — about 85 percent of what left. Roughly 598.5 BTC did not.
That remainder is the story now. It is worth somewhere around $47 million, it sits in an address controlled by people who have never been identified, and as of Monday no party to the exchange has described what it is doing there. Blockstream has not called it a bounty. Liquid has not called it a bounty. There is no published agreement, no disclosed terms, and no statement confirming that a deal exists at all.
The industry has a well-worn vocabulary for this situation, and none of it has been used.
A negotiation conducted in public
What makes the silence conspicuous is that everything else happened in the open. The parties negotiated by writing messages into Bitcoin transactions, which means the exchange is permanent, timestamped, and readable by anyone.
The opening message, attached to the transaction that moved the coins out, read: "we are whitehats, contact us on chain." Per The Record, the exchange that followed included the line "Please fix the bug first. The chain is under risk at latest commit right now," and later, simply, "Sending most back…is that ok."
Blockstream answered with a message signed against the security key published on its own website: "Bridge nodes are patched, safe to return the funds." Samson Mow, the JAN3 chief executive, publicly confirmed that patches had been deployed and federation nodes updated, per Cointelegraph.
So the technical conversation was explicit and it is on the record. The financial one is not. The coins moved; the terms did not.
Fifteen percent, and what to call it
Crypto has precedent for a recovered-funds arrangement in which the party returning the money keeps a cut. It is normally either negotiated and announced, or offered in advance under a published bug bounty programme with a stated ceiling. Neither applies here. What exists is a 15 percent residual and an absence of explanation.
Ledger chief technology officer Charles Guillemet drew the obvious line. If the roughly 600 BTC still under the takers' control represented a reward negotiated through encrypted on-chain communications, he said, the arrangement looked "more like extortion than white-hat hacking."
That is a judgement, not a finding, and Guillemet is a competitor's executive. But the structural point underneath it does not depend on who is making it. A bug bounty is a price a company sets before anything is taken. A negotiated return is a price set after everything is taken, by the party holding it. The two arrangements produce the same transfer and mean entirely different things, and the only thing that distinguishes them from the outside is a disclosure neither Blockstream nor Liquid has made.
It is worth being fair about the position Blockstream was in. Ninety-five percent of the federation's reserve was gone; the counterparty was anonymous, technically capable, and demonstrably in possession. Recovering 85 percent quickly is a real outcome, and the alternative to a fast quiet arrangement may well have been a slow public one that recovered less. What this desk cannot verify is whether an arrangement was made at all, because nobody has said.
The numbers do not agree yet
One practical caution for readers comparing coverage: the dollar figures attached to this incident vary between outlets, and the variation is not error so much as timing. Bitcoin moved during the episode, and each outlet converted at a different moment.
The same 598.5 BTC, priced five ways
| Outlet | Retained | Returned |
|---|---|---|
| The Record | ~$47M | $266.5M |
| Unchained | ~$47M | ~$270M |
| Cointelegraph | ~$47.6M | ~$270M |
| Bloomberg | ~$47M | 3,400 BTC |
| DefiLlama record | — | null |
That last row is the one worth sitting with. The most widely cited public ledger of crypto incidents had not, as of this desk's read on Monday, recorded that any of the money came back. Its Liquid Network entry lists $320 million taken, classified as an unbacked cross-chain mint, with the returned-funds field empty.
This is not a criticism of a volunteer-maintained dataset that updates on its own schedule; the return was hours old. It is a caution about the figures built on top of it. Every "crypto has lost $X billion in 2026" total published this week draws on that file, and that file currently counts the full $320 million as gone. Across all of 2026, by this desk's count, only five of its 256 incident records carry any returned-funds value at all, totalling about $1.9 million.
The network is still down
Liquid itself has not come back. Blockstream said updated software has been deployed and that federation members are preparing a coordinated restart, per Unchained, but the sidechain remained frozen through Monday while participants coordinated the work of bringing it back.
The underlying flaw was in Elements, the open-source software beneath Liquid — not, as early accounts suggested, in the peg-out authorization key itself. SideSwap, which processed the peg-out, said the L-BTC in that order had been created by the Elements bug and that its own systems were not compromised.
Blockstream has still not published a technical post-mortem, and it has not responded to requests for comment on the specifics. The company has now had two opportunities to explain the money and has taken neither.
The Take
The word "bounty" is doing enormous work in the coverage of this incident, and nobody with standing to use it has. That matters more than it sounds. A bounty is a price a company publishes in advance, in public, so that a researcher who finds something has a lawful and predictable way to get paid — the entire value of the institution is that the number exists before the discovery does. What happened here ran the other way: the coins moved first, the leverage was total, and the price emerged from an encrypted conversation between an anonymous party and a company with 95 percent of its reserve missing. Blockstream may well have made the right call under duress, and 85 percent back inside twenty-four hours is a better result than most weeks in this industry produce. But the company is now the only party who can say whether 598.5 BTC was agreed, demanded, or simply kept, and its silence lets every reader supply their own answer. Guillemet's word for it will stick precisely because nobody has offered a better one. The fix here is cheap and entirely within Blockstream's control: say what the arrangement was. Until then the industry is being asked to accept, on no evidence, that the difference between a reward and a ransom is a matter of tone.