320 million vanished from Liquid Network

SPEAKER_1 (0:01)

This episode is brought to you by Google Chrome. You think you know a browser, but Gemini and Chrome, that's new. It can help you with practically anything on the web, like restoring a vintage motorcycle from a 50-page restoration block, or finally break down that long article you've had open for weeks. Gemini and Chrome is here for it. Ready to make anything online make sense? There's no place like Chrome. Check responses set up required compatibility and availability varies 18 plus.

Eva Longoria (0:26)

Eva Longoria here, cookbook connoisseur, sports team tycoon, founder of a foundation. I've basically done it all. So when Lenovo asked me to lend an ear to small business owners, I cleared my incredibly busy schedule. Dial 18555, call Eva, and I'll be dishing out real business advice. Whether you're launching, scaling, or surviving the parts nobody puts on the press release, I'm working with Lenovo to back every business.

SPEAKER_3 (0:52)

Standard call and data charges may apply. Terms and conditions at callevanow.com.

SPEAKER_4 (0:56)

Hey, I'm running out to drop off a stack of letters and packages. Need anything shipped while I'm gone?

SPEAKER_5 (1:02)

Save the gas. stamps.com lets you print postage and schedule pickups right from your desk. Sync your contacts into the address book, get detailed accounting insights, and get notified the moment your certified mail is delivered. All from my desk? All from your desk.

SPEAKER_3 (1:16)

Join the 4 million businesses using stamps.com right now with CodePodcast and get your free welcome gift. stamps.com CodePodcast. Taxes and fees apply.

SPEAKER_4 (1:25)

4,000 Bitcoin worth roughly $320 million vanished from the Liquid Network, a side chain operated by Blockstream.

SPEAKER_6 (1:34)

Liquid is a network relied upon by several major cryptocurrency exchanges for settlement. So if the infrastructure built specifically to make exchange settlements secure is compromised, you have to ask how safe the underlying architecture holding these assets actually is.

SPEAKER_4 (1:50)

I mean, today we are looking at a stack of sources spanning crypto forensics, Wall Street labor reports and biotech trials to really look at one core question. What happens when the systems you trust blindly just turn out to be completely opaque black boxes?

SPEAKER_6 (2:06)

You really have to start with the mechanics of this specific exploit because calling it a hack relies on a traditional understanding of cybersecurity that just does not apply here.

SPEAKER_4 (2:15)

Right. There were no forced entries into a database.

SPEAKER_6 (2:17)

Yeah. No cryptographic keys were compromised. No hardware security modules were breached or physically accessed.

SPEAKER_4 (2:23)

So the individuals involved didn't break into his oeuvre and extract a private key.

SPEAKER_6 (2:27)

Not at all.

SPEAKER_4 (2:29)

The attacker basically exploited a software bug in Elements, and Elements is the underlying framework for Liquid.

SPEAKER_6 (2:35)

Right.

SPEAKER_4 (2:36)

They managed to mint unbacked Liquid Bitcoin just out of thin air. Then they cashed it out via a standard withdrawal process through a settlement platform called SideSwap.

That single action drained 95% of the Liquid Federation wallet's reserves.

SPEAKER_6 (2:51)

I think for anyone who isn't a blockchain developer, we probably need to clarify what Elements actually does in this context. Yeah. Like what is its exact function?

SPEAKER_4 (3:00)

So Elements essentially coordinates the rules for how assets are issued and destroyed on the secondary network. The mechanics of this exploit are entirely based on how the sidechain handles the peg between the base layer asset, which is actual bitcoin, and the tokenized representation on the sidechain, the liquid bitcoin. A sidechain is basically a parallel highway. You lock your car in a garage on the main highway, and they give you a token that represents your car so you can drive on the faster parallel highway.

Elements is the system that manages that garage.

SPEAKER_6 (3:28)

So this is where the logic flaw actually comes in.

By finding a flaw in how Elements validates the creation of new tokens versus how it authorizes their redemption on the base chain, the attacker bypassed the entire economic security model of the network. They pushed empty data through an approved authorization path, specifically the Pegout Authorization Key system, and the network just handed over actual base layer Bitcoin on the other side.

SPEAKER_4 (3:55)

Wait, for the listener who maybe isn't a back end developer, what is a Pegout Authorization Key actually doing? Is it just a digital bouncer at the door between the side chain and main Bitcoin?

SPEAKER_6 (4:05)

It is exactly a digital bouncer, but in this case, the bouncer was following a flawed set of instructions.

SPEAKER_4 (4:10)

So the system actually worked the way it was supposed to?

SPEAKER_6 (4:12)

It worked exactly as it was coded to work. The flaw was entirely in the logic of the code itself.