The Liquid Network attacker returned 3,400 BTC after Blockstream said its bridge nodes had been patched, leaving about 598.5 BTC behind.

Nearly 4,000 BTC reportedly left Liquid’s federation wallet as an onchain message claimed, “we are whitehats.”

Liquid pauses its network after roughly 4,000 BTC worth $320M is withdrawn from the federation wallet in a security incident.