pull down to refresh

aaaand...its gone

reply

I saw speculation that this may have been due to a consensus bug in Liquid.

Mempool's liquid explorer got stuck earlier today (#1563524), but Blockstream's liquid explorer did not.

@wiz notes that mempool was running a different version of Elements than Block stream.

source

reply

Bitmex Research identifies a transaction that didn't work on Wiz's liquid mempool explorer but did work on blockstream's:

https://blockstream.info/liquid/tx/f24a4b179b5cc7e88b25a763911f7cbdf2bf45d1d1b5ab611e94461cef0a183f?expand

source

reply
20 sats \ 1 reply \ @anon 6 Sep

Was this the same bug that was found on peerswap weeks ago?

reply

This one?

#1539582

Image got deleted, so it's harder to track down.

reply

Also, this:

source

reply

Looks like Stutxo has an idea what happened:

source

reply

Yes. I came to the same conclusion.

reply
reply
2 sats \ 4 replies \ @justin_shocknet 7 Sep -21 sats

https://gist.github.com/1440000bytes/211ac92dd4433bb1a2e674bf0ff7db2e

There you go. Security measures implemented, and circumvented.

@BlokchainB those your guys?

reply

Indeed they are

reply
171 sats \ 1 reply \ @optimism 6 Sep

they just converted 4k fake BTC to real BTC from the liquid peg by circumventing a security measure 😂

reply

Let’s see if @sideswap_io will come on SN and give a better explanation

reply

now the hackers want to be contacted on signal:

https://mempool.space/address/bc1q7le6nr37p892jzlyugr5sl29pfcg27xl77eafu

and a statement from Blockstream:

source

reply

Sideswap says it wasn't their code?

source

reply
143 sats \ 2 replies \ @freetx 6 Sep

"Elements bug" is very curious.

What does that mean? Another weak RNG issue? But Blockstream and others have said that keys are secure....so maybe whats going on is elements had a bug that allowed faulty / fake peg-out transaction and that this exploit was accepted by all other element-nodes on the network....so basically they crafted a fake peg-out that somehow bypassed checks and other elements nodes also accepted. The proverbial door and lock are secure but window is wide open.....

reply

I doubt it has to do with compromised keys.

reply

That’s my team!! 👍

reply
310 sats \ 2 replies \ @justin_shocknet 6 Sep -420 sats
Signal

Oh boy... may as well asked for a DM on LinkedIn.

oof!

reply

that is the word of the day.

reply

Just the day?

reply

year?

reply

Exactly. Hate 2026.

reply

Can I do a spot swap for 0.04 BTC == 1 LBTC right now?

just pulling legs

reply

deleted by author

reply

We'll just have to do it on whatever version of elements Mempool is running.

Let's hope it stays at that!!!

reply