The $320 million hack of the Bitcoin-linked Liquid Network is another dent to crypto’s reputation as the industry tries to convince banks and institutional investors that digital assets can become part of mainstream financial infrastructure.
The damage extends beyond the Bitcoin that was taken. Liquid was built to make the largest cryptocurrency more useful for trading and settlement, and the incident highlights the risks in the layers surrounding a blockchain — the wallets, custody arrangements and transaction infrastructure that users ultimately have to rely on.
“Continued exploits reinforce to global fintechs and institutions that decentralized finance is still not ready for prime time,” said Nikhil Raghuveera, chief executive officer of Predicate, a blockchain compliance infrastructure provider. “Blockchains are great for financial settlement but DeFi is not ready for the institutional standards that are taken for granted in legacy markets.”
Ongoing hacks are exposing decentralization — once touted as one of crypto’s greatest strengths — as a vulnerability. By removing central authorities responsible for reversing mistakes, safeguarding assets and absorbing losses, the system leaves users dependent on fragmented infrastructure that malicious actors continue to find ways to attack.
Hacking incidents are increasing even if the overall amount lost isn’t. About $1.4 billion has been taken by hackers so far in 2026 across 250 attacks, compared with $2.7 billion over 146 attacks in 2025, according to DefiLlama data.
This year, 26 of the assaults, or over 10%, were on bridges and cross-chain infrastructure, connecting tools for users to move tokens or information from one blockchain to another. In 2025, DefiLlama identified only three hacks in this category.
Cross-chain links are a critical component of DeFi, enabling the automation of moving and converting different types of digital assets. But a myriad of cross-chain projects and a limited capacity for cybersecurity vetting has raised risks.
‘White-Hat Hackers’
The Liquid Network hack this week is the latest in a spate of breaches targeting decentralized platforms this year, including on Kelp DAO and Drift Protocol that together accounted for $588 million in losses.
Liquid said about 4,000 Bitcoin, or roughly 95% of the Bitcoin held in its main wallet, were drained by hackers who described themselves as “white hats,” a term for hackers who uncover security flaws with the aim of having them fixed, sometimes in exchange for a fee.
In this instance the hackers returned 3,400 of the Bitcoin, keeping about $47 million worth, according to Alex Thorn, head of research at crypto firm Galaxy Digital Inc. As the incident unfolded, the Liquid Hackers and Blockstream communicated through messages included in transactions on the Bitcoin blockchain. Dialogue was still ongoing by Tuesday morning in New York, according to Galaxy Research.
The authorization key for the settlement platform used in the hack wasn’t compromised, according to Liquid, making the episode a reminder that even when the underlying blockchain continues to operate, the systems built around it can fail.
Just last week, an attacker drained $6 million from a Crypto.com-linked digital-asset lending platform, and in August a hack of the popular offline Bitcoin wallet Coldcard raised questions about the safest way to store the digital asset.
Even when the industry has a highly secure underlying network, investors could be exposed through the applications and intermediaries sitting on top of it.
“These incidents demonstrate the vulnerabilities sit at operational and infrastructure layers, not the base consensus mechanisms,” said Ziqing Ang, head of policy in APAC at TRM Labs.
That creates a particular challenge as traditional finance moves deeper into crypto.
A bank considering tokenized deposits or securities, for example, isn’t only assessing whether the blockchain is secure. It also needs confidence in the custody system, smart contracts, settlement mechanism and entities responsible for controlling assets.
“A vulnerability in one piece of infrastructure can affect multiple businesses that rely on it,” said Raghuveera. “An exchange using a compromised bridge, a wallet holding the affected token or a market maker providing liquidity can suddenly find itself exposed even if its own systems were never breached.”
Even though the majority of the Bitcoin taken in the Liquid hack was returned, that “does not change the nature of the risk,” said Aneirin Flynn, chief executive of cybersecurity technology firm FailSafe.
“This attack could just as easily have been carried out by a malicious group with no intention of returning the funds,” Flynn said. “The fact that millions of dollars could be extracted because of a bug in the code points to software vulnerabilities as a durable risk for crypto infrastructure.”
Paradox
That is the paradox facing crypto as it matures — the industry was created to reduce the need for trust in financial intermediaries, but its institutional future increasingly depends on trusting the infrastructure built around blockchains.
The cost of a loss of confidence could be higher security requirements, greater demand for insurance and capital buffers, more diversification among custodians and settlement networks — or simply a slower pace of institutional adoption.
Crypto has spent years arguing that blockchains can provide a more efficient financial rail. The Liquid hack is another reminder that the rail itself may only be as trustworthy as the infrastructure carrying the assets on top of it.
This article was provided by Bloomberg News.
Facts Only
* The Liquid Network hack resulted in a $320 million loss.
* The incident highlighted risks in wallets, custody arrangements, and transaction infrastructure surrounding a blockchain.
* Nikhil Raghuveera stated that decentralized finance is not ready for institutional standards taken for granted in legacy markets.
* Hacking incidents expose decentralization as a vulnerability by removing entities to reverse mistakes or safeguard assets.
* In 2026, $1.4 billion was taken across 250 attacks; this compares to $2.7 billion over 146 attacks in 2025 (DefiLlama data).
* In 2026, 26 assaults, or over 10%, targeted bridges and cross-chain infrastructure.
* Liquid Hackers reportedly returned 3,400 Bitcoin, retaining approximately $47 million.
* The authorization key for the settlement platform was not compromised in the Liquid hack.
* Attacks have targeted decentralized platforms including Kelp DAO and Drift Protocol, accounting for $588 million in losses.
* Vulnerabilities exist at operational and infrastructure layers, not base consensus mechanisms.
Executive Summary
A recent hack of the Bitcoin-linked Liquid Network, resulting in a $320 million loss, highlights vulnerabilities in the infrastructure surrounding blockchain technology rather than solely within the underlying ledger. The incident underscores risks associated with custody arrangements, wallets, and transaction systems that users rely upon. Experts suggest that while blockchains facilitate financial settlement efficiently, decentralized finance (DeFi) is not yet aligned with the institutional standards of legacy markets. Ongoing incidents expose the fragility of decentralization when central authorities are absent to manage losses or reversals.
The issue extends beyond the immediate loss; repeated exploits demonstrate that operational and infrastructure layers present significant vulnerabilities, even if the core blockchain consensus mechanisms remain secure. This systemic weakness creates a challenge for traditional finance seeking deeper integration with crypto, as institutions require confidence in custodial systems, smart contracts, and settlement mechanisms alongside network security. The narrative suggests that trust shifts from the base technology to the overlying operational scaffolding connecting digital assets.
Full Take
The narrative shifts from viewing blockchain as an inherently trustless system to recognizing it as a layer built upon increasingly complex, centralized-like infrastructural dependencies. The persistence of hacks, even when assets are recovered, suggests that the risk is rooted in the application and middleware rather than the foundational cryptography. This points toward a critical divergence: the technical possibility of decentralized finance versus the operational reality of its implementation within existing financial structures.
The pattern observed is the challenge to the premise of decentralization itself; if malicious actors can successfully exploit operational layers without invalidating the consensus, then decentralization becomes an illusion of control rather than a security guarantee. This forces institutional adoption to contend not just with on-chain security, but with the systemic risk posed by the interconnectedness of off-chain systems like bridges and custody protocols. The underlying implication is that trust requirements are simply being migrated from centralized financial intermediaries to fragmented, complex technical infrastructure.
What is missing is a clear framework for evaluating the robustness of these middleware layers against regulatory and institutional demands. If institutions must rely on custody and settlement mechanisms, the current state—where system failure impacts multiple dependent entities regardless of base security—suggests that the solution requires developing new standards for operational assurance layered atop cryptographic proof. How does the inherent tension between the efficiency sought by blockchain rail and the fragility found in its track demand a rethinking of what constitutes 'trust' in a mature decentralized economy?
Sentinel — Human
The article presents a balanced forensic analysis of a security incident, effectively arguing that decentralized finance's risks are often embedded in its operational infrastructure rather than the underlying blockchain technology itself.