Liquid Network：已追回 3400 枚 BTC，漏洞系 Elements 缓存验证而非私钥泄露

Liquid Network：已追回 3400 枚 BTC，漏洞系 Elements 缓存验证而非私钥泄露

2026-09-09 10:41

Liquid Network 发布安全事故报告称，9 月 6 日其底层开源软件 Elements 漏洞被利用，攻击者铸造约 4000 枚无 BTC 储备支持的 LBTC（价值约 3.2 亿美元），并通过 SideSwap 将其转换为 BTC 提取。

事件导致 Liquid 储备金从约 4205 BTC 降至 197 BTC。报告指出，漏洞源于 Elements 的缓存验证问题，而非私钥泄露；其他资产（如 USDT）未受影响。

Blockstream 已于 9 月 7 日向跨链节点部署补丁，漏洞已修复，但网络目前仍处于暂停状态。攻击者自称白帽安全研究人员。

目前已有 3400 枚 BTC（约 2.72 亿美元）被返还至锚定钱包，仍有约 598.5 枚 BTC（约 4788 万美元）尚未追回，Blockstream 正与其协商中。

Blockstream 预计将在 48 小时内发布 Elements（v23.3.4）紧急版本并推进网络恢复。

其此前于 9 月 7 日宣布，该攻击者从 Liquid Federation 钱包提走约 4000 枚比特币。

Disclaimer: Contains third-party opinions, does not constitute financial advice

Recommended Reading

NVIDIA attracts $85 billion in investor demand during massive bond issuance

06-16
NVIDIA attracts $85 billion in investor demand during massive bond issuance

Ethereum surges over 10% in 24 hours, currently priced at $1,841.31

06-16
Ethereum surges over 10% in 24 hours, currently priced at $1,841.31

Amazon announces a multi-billion dollar investment in Missouri to build a data center campus, expected to create over 400 long-term positions

06-16
Amazon announces a multi-billion dollar investment in Missouri to build a data center campus, expected to create over 400 long-term positions

Binance Platform's SpaceX Perpetual Contract Trading Volume Surpasses $9 Billion, Capturing Over 60% Market Share

06-16
Binance Platform's SpaceX Perpetual Contract Trading Volume Surpasses $9 Billion, Capturing Over 60% Market Share

Binance platform XLM/USDT short-term spike down to $0.17, now recovered to $0.225

06-16
Binance platform XLM/USDT short-term spike down to $0.17, now recovered to $0.225

Trump: The Strait of Hormuz has been fully reopened as of Friday, and all agreements have been signed

06-16
Trump: The Strait of Hormuz has been fully reopened as of Friday, and all agreements have been signed

SlowMist: Aztec Connect Contract Hacked for $2.19 Million Due to ZK-Rollup L1/L2 State Boundary Vulnerability

06-15
SlowMist: Aztec Connect Contract Hacked for $2.19 Million Due to ZK-Rollup L1/L2 State Boundary Vulnerability