And in related news dead fish often rot down from the head.
The dispute between Blockstream and the party claiming to be a white-hat hacker has taken a sharper turn, according to Samson Mow’s latest update.
The hacker has accused Blockstream of serious security failures, while claiming that the company allocated only $1.5 million, or possibly nothing, to secure $5 billion in assets.
Fresh Clash With Blockstream
Calling this a “flagrant neglect of security,” the hackers demanded that Blockstream pay a 10% bug bounty from its own funds and warned that failure to do so could result in a 15% loss for Liquid users.
The message also accused Blockstream of being “delusional, greedy, and arrogant” over its handling of security. The hackers further said they planned to publish the private key needed to decrypt their conversations afterward.
Meanwhile, Liquid has kept the sidechain paused as Blockstream and Federation members work on further security fixes, address a chain split, and prepare for a coordinated restart. Users have also been told not to send Bitcoin to Liquid peg-in addresses until the network is back online.
The latest message comes after roughly 4,000 $BTC, worth around $320 million at the time, was taken from Liquid’s Federation wallet on September 6. The party behind the withdrawal initially claimed to be white-hat hackers and said the funds would be returned once Blockstream fixed the security issue and patched all affected nodes. After Blockstream confirmed the bridge nodes had been patched, 3,400 $BTC was returned to the Federation wallet, while roughly 598 units remained with the hackers.
No comments:
Post a Comment