Blockstream rejects ransom demand over Liquid hack, says remaining BTC will be pursued through legal channels

Blockstream rejects ransom demand over Liquid hack, says remaining BTC will be pursued through legal channels

N
News Editor
2026-09-11 06:58:52
Blockstream said it will not pay a ransom to the attacker behind the Liquid incident, stating that taking assets without authorization and refusing to return them is theft rather than responsible disclosure or white-hat conduct. The company said it has been in contact with the attacker in an effort to secure the return of user funds, but it will not accept the behavior or the conditions attached to it. Blockstream also said it will not allow open-source software developers to bear a ransom burden far beyond their level of economic participation. The firm added that the bitcoin can still be returned and that the attacker can still align with white-hat standards. If the remaining funds are not returned, Blockstream said it will work with law enforcement, exchanges, service providers, and forensic experts to trace and recover the assets and identify those responsible. Foresight News noted that the attacker posted an on-chain message on Sept. 9 demanding a 10% bounty from Blockstream’s own funds, while earlier reporting cited by Foresight said about 3,400 BTC had been returned and roughly 600 BTC remained outstanding.

In a post on X, Blockstream said it will not pay a ransom to the attacker tied to the Liquid incident. The company said taking assets without permission and refusing to give them back is theft. Not responsible disclosure. Not white-hat behavior.

Blockstream also said it has been in contact to press for the return of user funds, but it will not accept either the behavior or the strings attached to it. And it said it will not allow open-source software developers to carry a ransom cost wildly out of proportion to their level of economic participation.

The company added that the bitcoin can still be returned, and that the attacker still has a chance to act in line with white-hat principles. But if the stolen funds are not returned, Blockstream said it will work with law enforcement, exchanges, service providers, and forensic experts to trace and recover the assets through all lawful means and identify whoever is responsible.

Attacker demanded a 10% bounty

Foresight News said the Liquid attacker posted an on-chain message on Sept. 9, accusing Blockstream of badly underinvesting in security and demanding that the company pay a 10% bounty from its own funds. The message said, "Your holders will suffer a 15% loss because of your irresponsibility and stinginess."

Some funds were returned earlier

In an earlier report, Foresight News, citing Bitcoin News, said the Liquid attacker had already returned about 3,400 BTC, with about 600 BTC still unrecovered.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
100

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.