Blockstream bets 600 Bitcoin by rejecting Liquid hacker’s $50 million bounty demand

Blockstream is refusing to pay the Liquid attacker nearly 600 Bitcoin (roughly $50 million), escalating a dispute over how the crypto industry should reward partial restitution.The standoff follows an unusual recovery from the Sept. 6 exploit, when a vulnerability allowed the attacker to create about 4,000 unbacked L-BTC and withdraw roughly 3,996 real BTC through SideSwap. The attacker returned 3,400 BTC after Blockstream patched affected nodes, then demanded a 10% bounty paid from Blockstream’s own funds and warned that holders could otherwise bear a roughly 15% shortfall.Table compiles on-chain messages attributed to the Liquid hackers and Blockstream, including PGP-signed exchanges and transactions connected to the return of 3,400 BTC. Source: Galaxy ResearchOn Sept. 11, Blockstream rejected the demand and said it would pursue the remaining funds through law enforcement, exchanges, service providers, and forensic specialists if they are not voluntarily returned.The decision has opened a broader argument over whether refusing to compensate an attacker who returned about 85% of the haul strengthens deterrence or gives the next hacker less reason to return anything.Blockstream's r...