What happened
TRM Labs reports a Bitcoin drain of $319 million from Liquid Network and the return of 85% of funds; independent confirmation is absent.
Why it matters
The reported Bitcoin drain of $319 million constitutes a major security incident, while the return of 85% of funds leaves questions open regarding the attack mechanics and the fate of the remainder.
According to TRM Labs, attackers drained Bitcoin worth 319 million from the Liquid Network, which is associated with Blockstream. They later returned 85% of the funds.
TRM Labs labels this incident the largest hack of 2026 year to date, but the provided material contains only a publisher synopsis. Independent confirmation of the event is absent from the available package.
From a practical standpoint, attention now focuses on the remaining portion of the funds and an explanation of how the hack was executed. Details regarding the attack mechanics, the exact amount of unreturned assets, and the identity of the attackers are not provided in the source.
Confirmed facts
- TRM Labs reports that attackers drained Bitcoin worth 319 million from the Liquid Network, associated with Blockstream.
- According to TRM Labs, the attackers returned 85% of the funds.
- TRM Labs identifies this incident as the largest hack of 2026 year to date.
- There is no independent confirmation of TRM Labs' statement in the available source.
Context
The material is based on a single source—TRM Labs; the evidence base is presented only as a publisher synopsis of metadata, not the full text of an investigation.
What remains unknown
- How exactly was the Liquid Network hack implemented?
- What is the exact amount of funds that remains unreturned?
- Who was behind the attack?
- Has independent confirmation of the TRM Labs report emerged?
Editorial context
Confidence: medium
The likely consequence is increased attention to asset control and transaction investigations following the return of funds. The next observable signal will be independent confirmation of the incident or the publication of technical details of the attack. Significant uncertainty remains due to the lack of a second source and the full investigation text.