Security· ★★★★· bearish·

Liquid loses nearly 4,000 BTC to software flaw, not stolen keys

  • Nearly 4,000 BTC left Liquid's reserve on September 6
  • Attackers issued unbacked L-BTC through a software vulnerability
  • Keys were not stolen: the system itself approved the withdrawal
  • The attack was reconstructed by TRM Labs
Why it matters: The incident shows that key protection does not guarantee asset safety: software vulnerabilities and insurance payout limits shift losses onto customers.
Source: CryptoSlate