Liquid Reports Recovery of 3,400 BTC; Self-Described Whitehats Retain About 598.5 BTC
Key Takeaways
- •Liquid reports having recovered 3,400 BTC after an unauthorized drain of its platform reserves.
- •A group describing itself as whitehat hackers retains approximately 598.5 BTC, a self-applied label that has not been independently verified.
- •No evidence of an authorized bounty, fee, ransom, or negotiated settlement has been presented to justify the funds kept by the hackers.
- •The original reserve balance and total drained amount remain unknown, so a full restoration of Liquid's reserves cannot be confirmed.
- •The reported recovery does not clarify customer impact, and the status of user funds remains undetermined pending confirmed transactions and official remediation information.

Liquid has recovered 3,400 BTC after a drain of its reserves, while a group describing itself as whitehat hackers retained about 598.5 BTC. The figures form the basis of the reported Liquid bitcoin recovery, but they do not by themselves establish how much was originally taken or whether the recovery is complete.
Liquid reports recovery of 3,400 BTC
Liquid recovered 3,400 BTC following the reserve drain. In practical terms, most of the bitcoin that left the platform has reportedly been returned. Earlier coverage has focused on the recovered amount and the smaller sum retained by the actors.
The available account does not establish the complete incident timeline, the attack method, or whether Liquid has issued a statement about the event. In this context, “reserves” refers to the pool of bitcoin the platform is intended to hold, while a drain means that bitcoin left that pool without authorization.
The recovery report follows earlier accounts that about 4,000 BTC left a Liquid wallet and that nearly 4,000 BTC was withdrawn in a reported incident. Those figures were reported separately from the recovery total and should not be added together. The related accounts are available in reports on the Liquid Network wallet withdrawal and the reported security incident.
Self-described whitehats retain about 598.5 BTC
A group describing itself as whitehat hackers retained about 598.5 BTC. “Whitehat” generally refers to hackers who say they act to help rather than to steal. In this case, however, the label is the group’s own description and has not been independently verified.
The retained amount is separate from the 3,400 BTC recovered. The available account provides no evidence of an authorized bounty, fee, ransom, or negotiated settlement covering the bitcoin that was kept.
Earlier reporting said the attackers had reportedly offered to return most of the bitcoin. That reported offer does not establish whether the retained amount resulted from an agreement. The figures alone cannot confirm the basis for the retention.
What the figures do not establish
The two headline figures do not establish the original reserve balance or the total amount drained. Without that starting figure, they cannot show whether Liquid’s reserves have been fully restored.
The unresolved issues include the original drain total, the basis on which approximately 598.5 BTC was retained, and whether any additional recovery remains. Some accounts have cited a larger figure of 3,996 BTC associated with Liquid. That figure is discussed in related reporting and underscores that the amount recovered may not equal the amount that left.
The available information also does not address customer impact or remediation. For holders, the reported recovery therefore confirms only that 3,400 BTC was recovered; it does not determine the status of user funds. Further clarity would require confirmation of the relevant transactions, the original reserve figure, and any remediation information from Liquid.
Bitcoin movements can be checked on public block explorers such as Mempool.space, where transactions and balances are publicly visible. Until a specific transaction and the original reserve figure are confirmed, the recovery should be treated as reported but incomplete in detail.
Source: CoinLineup
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always conduct your own research before making decisions.