Blockstream Refused a Hacker's $50M Bounty. Now 598 BTC Is Stuck in Limbo

Blockstream just looked at a $50 million demand and said no. The attacker who drained the Liquid sidechain on Sept. 6 wanted a 10% bounty after returning 3,400 Bitcoin out of roughly 3,996. Blockstream rejected it on Sept. 11. The remaining 598.5 BTC, close to $50 million, stays exactly where it's.

Here's the wild part. This is still a good outcome. A hacked protocol getting 85% of its funds back basically never happens. Lorenzo Romagnoli, co-founder of USDT0, put it bluntly. Blockstream is already in the "1% of the 1% of luckiest hacked protocols on the planet."

So why not just pay and move on? Because the attacker's math was delusional. They wanted the bounty pulled from Blockstream's own treasury and argued the company spent too little guarding the $5 billion in assets sitting on Liquid. Samson Mow, Jan3 CEO and former Blockstream strategy chief, shut that down fast. That $5B number bundles L-BTC, Tether, and third-party real-world assets. Different issuers. Different holders. You can't price a bounty off someone else's money.

And the white-hat framing falls apart under inspection. SideSwap says the wallet ran 70 practice transactions before the real mint, and the funding traced through a cross-chain bridge to Tornado Cash. That's not a researcher poking at a bug. That's a rehearsed heist.

Now the last 598.5 BTC sits in limbo. Bitcoin researcher Alex Waltz thinks the attacker might never spend it. Every move through an exchange is another breadcrumb for investigators. Holding it might be the only way left to hurt Liquid, because the peg is still cracked. SideSwap reports 4,205 L-BTC in circulation against 3,597 BTC in reserve. That's about 85% backing. Peg-ins and peg-outs are disabled. Markets trade again but you can't redeem.

Adam Back says the peg gets covered one-for-one and holders shouldn't dump at a discount.

Bestie, your portfolio needs to hear this. Refusing to pay sets a hard line that open-source devs aren't ATMs. But it also tells the next hacker that returning 85% gets you the same manhunt as returning nothing. Watch whether those 598.5 BTC ever move. If they don't, Blockstream has to plug the hole with its own money.