Liquid Network closes the 602 BTC gap: L-BTC is fully backed again

In short: Every L-BTC on the Liquid Network is once again fully backed by real bitcoin. The gap of around 602 BTC that the exploit of September 6, 2026 tore into the reserve has been closed; the last 550 BTC arrived on November 2. The Liquid Federation then officially reported full backing. What remains restricted for now is direct redemption through the Federation itself, known as the peg-out.

What is established: according to the public Liquid dashboard, reserve and circulation match again, and the individual deposits are documented. Our assessment follows further down. The backing has been restored; trust in how the reserve is managed has not fully returned.

L-BTC fully backed again: 4,271 BTC in reserve against 4,271 L-BTC in circulation

On Tuesday evening the Liquid Federation's bitcoin reserve stood at 4,271.607 BTC. At the same time, 4,271.607 L-BTC were in circulation. The difference was 52 satoshis, or 0.00000052 BTC, in favour of the reserve. cryptoticker.io compiled this figure itself on November 3, 2026, based on the two metrics the public Liquid dashboard publishes for the reserve and for L-BTC issued.

At a bitcoin price of around $77,460, or €69,215 (CoinGecko, as of around 6 pm German time on November 3), the reserve is worth a little over $330 million. At that price, the closed gap of roughly 602 BTC was worth about $46 million, or just under €42 million.

L-BTC is the bitcoin variant on Liquid. More precisely, it is a token on the Liquid sidechain that is meant to be backed by exactly one bitcoin in the Federation's reserve and that can, in theory, be swapped back one to one at any time. For eight weeks, that promise was not fully kept.

The exploit of September 6: how a cache bug in Elements created 4,000 L-BTC

Blockstream, the developer behind Liquid, set out the sequence of events in a detailed incident report. At 13:53 UTC on September 6, 2026, the network accepted a transaction whose output value was not covered by its inputs. That produced around 4,000 L-BTC with no bitcoin behind them. The attackers redeemed them through a peg-out; by 14:28 UTC the withdrawal of around 3,996 BTC had been confirmed on the bitcoin blockchain.

According to the report, the cause was a bug in the cache of Elements, the software Liquid runs on. Elements verifies confidential amounts with range proofs, cryptographic evidence that a hidden amount lies within a valid range. Verified results were stored in a cache. The key for that cache concatenated its fields without length prefixes. The attackers built a transaction whose byte sequence matched an entry already stored, and nodes holding that entry skipped the check.

As a result, the reserve fell from about 4,205 BTC to 197 BTC. On September 7, the attackers, who described themselves as white hats, sent back 3,400 BTC. By Blockstream's count, around 602 BTC remained outstanding. Whether the self-description holds has not been independently verified.

Blockstream rolled out an emergency patch to the bridge nodes on September 7 and released the fixed version, Elements 23.3.4, on September 9. Block production resumed the same day, with user transactions following on September 10. Other assets on Liquid, such as USDt, were not affected according to the report, but they could not be used during the pause either.

Peg-in, peg-out and the Federation: how the Liquid sidechain works

Liquid is a sidechain, a separate blockchain that runs alongside bitcoin and is connected to it by a bridge. Anyone who wants to use bitcoin on Liquid sends it to the Federation and receives L-BTC in return. This route is called the peg-in. The way back, in which L-BTC is destroyed and real bitcoin is paid out, is called the peg-out.

The Federation is a group of companies, including exchanges, trading firms and infrastructure providers, that jointly manage the bitcoin reserve via multisignature. Individual members hold a peg-out authorization key (PAK), which lets them initiate peg-outs. In the exploit, the withdrawal ran through SideSwap, a Federation member with a PAK. According to Blockstream's report, the key itself was not compromised; the request relied on L-BTC that the network had previously accepted as valid.

The report also quotes a statement from SideSwap saying that the service had kept its signing key online, forwarded withdrawals within the same bitcoin block and set no limits on amounts or speed. These points are at the core of the announced governance changes.

For users, it ultimately comes down to one question: is there a bitcoin behind every L-BTC? Liquid promotes faster settlement and confidential amounts. The price is a trust model in which a group of companies holds the reserve. Anyone who holds bitcoin directly on the bitcoin blockchain does not carry that risk.

The 602 BTC gap: four deposits between October 27 and November 2

The gap was closed in four steps. According to a statement from SideSwap, 2.5 BTC went into the Federation's peg wallet on October 27, followed by 50 BTC on October 28. On November 2, first 300 BTC and later that day another 250 BTC were added. Together that comes to 602.5 BTC, slightly more than the gap Blockstream had put a figure on.

SideSwap does not break down where the bitcoin came from and refers to the Federation's announcement. The same source recalls that Blockstream CEO Adam Back publicly pledged on September 10 that the peg between L-BTC and BTC would be covered one to one. The Federation has not yet published a breakdown of which member contributed what share.

One point matters for context: the attackers did not return the missing 602 BTC. In September, Blockstream had rejected a demand for a ten percent bounty in exchange for their return. The gap was filled by the operators, so the loss has not disappeared. It now sits with those who paid in.

Federation peg-outs still restricted: the SideSwap route costs 0.1 percent

Full backing does not yet mean that every holder can redeem L-BTC directly with the Federation straight away. Under the recovery plan of October 20, the backing had to be in place first; Federation peg-outs are then meant to restart in a controlled way for PAK holders. No date has been set. According to SideSwap, the timing depends on the remaining security and operational requirements; the Federation said on October 27 that the independent security audit was close to completion.

Until then, redemptions run through swap providers. Since October 20, SideSwap has offered a peg-out at a one-to-one rate, minus a fee of 0.1 percent. The peg-in, the route from BTC to L-BTC, has been open there since September 11 on the same terms. The bitcoin paid out comes from SideSwap's own wallet, which is topped up manually. If it runs dry, withdrawals go into a queue and are processed in the order they arrive. Users do not need to do anything.

For a holding of one bitcoin, the detour therefore costs 0.001 BTC, just under €70 at today's price. Anyone holding a small amount pays correspondingly less, but should factor in the network fee on the bitcoin side.

Proof of reserves on Liquid: checking the backing yourself

Proof of reserves means that a custodian makes its holdings publicly verifiable. On Liquid this is comparatively simple, because reserve and circulation are visible on-chain. The Liquid dashboard shows both figures side by side. If the reserve is equal to or above circulation, every L-BTC is backed. If it is below, there is a gap, as there was between September 6 and November 2.

We explained back in September how to read the figures and what a discrepancy means in our piece on L-BTC backing. Anyone running their own Elements node can also verify the reserve independently of the dashboard.

The Federation itself also points to the public dashboard as the place where anyone can check the current position. For a retail investor, a look there before any larger transaction is enough.

How to protect yourself from scams around the Liquid peg

What happened: On September 6, 2026, attackers used a bug in the Elements software to create around 4,000 unbacked L-BTC and exchanged them for roughly 3,996 real bitcoin. 3,400 BTC came back the following day, and the remaining 602 BTC or so were replaced by the operators by November 2 (Blockstream, SideSwap, as of November 3).

Are you affected? Those affected were anyone holding L-BTC or wanting to swap via Liquid between September 6 and November 2. According to SideSwap, individual users' seed phrases, wallets and balances were not attacked. Anyone holding bitcoin only on the bitcoin blockchain was not affected. The only open question is when Federation peg-outs will run without restrictions again.

1. Official channels only: Read news about peg-outs only on the websites of Liquid, Blockstream and your wallet provider, opened from your own bookmark, never via links in chats or search ads.
2. No "special peg-out": Ignore offers promising faster or priority redemption for an extra fee; the regular swap at SideSwap costs 0.1 percent and requires no upfront payment.
3. Keep your seed phrase secret: No federation, no swap service and no support desk will ask for your recovery phrase; anyone who does wants to empty your wallet.
4. Check the backing before large amounts: Before any larger swap, compare reserve and circulation on the Liquid dashboard and only swap once the reserve at least matches circulation.
5. Long-term holdings on a hardware wallet: Bitcoin you do not actively need on Liquid should go back to the bitcoin blockchain via a peg-out and onto a hardware wallet; keep only the amount for fast payments on Liquid.

Our guide on how to store crypto safely covers the basics of secure custody, and our hardware wallet comparison lines up the right devices.

Governance and security audit: what the Federation is announcing next

The Federation has said it will present details in the coming weeks on changes to governance and oversight, as well as on additional technical and operational safeguards. According to SideSwap, the rules for members' peg-out keys are being revised, including procedures for bitcoin keys held offline. An independent security review of the fixed Elements version is under way.

SideSwap plans to keep its swap service running unchanged until Federation peg-outs return. After that, the batched swaps through the Federation are to be replaced by regular peg-outs again.

Our view: The recovery is a good sign, because the reserve did not stay underfunded for good and reserve and circulation match in a way anyone can verify. The four documented deposits and the 52-satoshi difference in favour of the reserve support that. Against it: eight weeks after the attack, the actual redemption route through the Federation is still restricted, and the origin of the replacement bitcoin has not been officially broken down. As long as peg-outs run only through a service with a manually topped-up wallet, L-BTC liquidity depends on that service. This is not a recommendation to buy or sell.

The case also shows where the limit of any bridge lies. A software bug was enough to create L-BTC out of nothing, even though no key was stolen. No wallet setting protects an individual investor against bugs of this kind. The only protection is deciding how much to entrust to a sidechain.

Liquid peg: full backing, Federation peg-outs still without a date

For L-BTC holders, the most important point is settled: there is a bitcoin behind every token again. Three steps help put the situation in order:

1. Split your holdings: Keep on Liquid only what you need for fast payments, and store the rest on a device from our hardware wallet comparison.
2. Sell through regulated providers: If you want to sell bitcoin for euros after redeeming, use an exchange from our comparison of regulated crypto exchanges with a MiCA licence.
3. Buy without the detour: You do not need L-BTC for a new purchase; buy bitcoin directly on one of the crypto exchanges in our comparison and withdraw it to your own wallet.

(As of November 3, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)