Immunefi CEO: Liquid Network attackers forfeited whitehat status by keeping 598.5 BTC
- —Attackers returned 3,400 BTC of the roughly 4,000 BTC taken, keeping 598.5 BTC
- —Blockstream refused to pay a 10% bounty and rejected the whitehat claim
- —Amador: rescue terms must be set before an exploit, not negotiated afterward
- —The exploit stemmed from a cache-key collision in Elements confidential transaction verification
Why it matters: The case sets a precedent for whitehat bounties: without pre-agreed rules, retaining user funds is treated as theft, shaping future exploit negotiations.
Source: crypto.news