Caching bug in Elements lets attacker steal 4,000 BTC
- A caching flaw in Liquid's core software allowed an attacker to drain 4,000 Bitcoin.
- The hacker returned 3,400 Bitcoin after node patches, keeping a $48 million fee.
- Automated AI scanners are turning public vulnerability fixes into immediate exploit blueprints.
A single caching shortcut broke federated sidechain consensus in seconds.
On Ungovernable Misfits, hosts q and a detailed how the vulnerability exploited the Elements software underpinning Blockstream's Liquid Network. To speed up validation of confidential transactions, the software cached successful range proofs without recording critical details like asset types or spending conditions. SideSwap accepted 4,000 forged range proofs, routing them through the standard peg-out mechanism while 11 federation signers authorized the transfer.
The vulnerability sat in plain sight before the attack. Independent analyst Orange Surf noted on Ungovernable Misfits that a GitHub pull request fixing the caching logic had been sitting unmerged since early September 2026. Because nodes had not yet deployed the patch, the exploit gutted the network's reserve holdings, leaving roughly 200 Bitcoin on the entire sidechain.
After Blockstream issued a critical patch for its bridge nodes on September 8, 2026, the attacker returned 3,400 BTC. On Bitcoin And, host David Bennett detailed how the hacker kept 598.5 BTC - roughly $48 million - as an unnegotiated 15 percent finder's fee. Blockstream sent encrypted on-chain payloads pushing back on the fee, but the attacker simply ended the conversation with a sad-face emoji and walked away.
Bennett warned that AI-powered vulnerability scanners have fundamentally changed open-source security. Automated tools scan public repositories continuously, generating working exploits far faster than human maintainers can audit and merge fixes. When a pull request sits public for days, automated scanners turn transparent bug fixes into blueprints for immediate attacks.
This rapid exploit cycle has pushed hardware makers to demand stricter disclosure rules. On Bitcoin And, Ledger CTO Charles Guillemette and Trezor security head Jan Komarek argued for a strict 90-day private disclosure window before security research goes public. Bennett noted that clout-driven public disclosures paired with amateur AI discovery tools create asymmetric risk for users whose funds remain exposed while engineering teams scramble to test firmware.
The Liquid exploit exposes the delicate trust trade-offs in federated architecture. While alternative chains like Cronos recently rolled back 10,961 blocks to recover $111 million after a lending market exploit, Liquid relied on code patches and on-chain bargaining to reclaim user funds.
Software sidechains promise scale, but automated tools ensure that every unmerged patch is a ticking clock.