The Week in One Sentence
$320 million walked out of a Bitcoin sidechain and mostly walked back, a hard fork launched to an empty room, and a rounding error all but decided the Fed.
1. $320 Million Walked Out Through the Front Door
Last Saturday, roughly 4,000 Bitcoin left the wallet that backs Liquid, the sidechain Blockstream has run since 2018, in a single transaction. That was about 95% of the roughly 4,200 coins the wallet held. Nothing about the transaction looked like a break-in. It was a normal withdrawal, a peg-out, signed by 11 of the 15 companies whose keys jointly control the federation. Every signature was valid. The ledger did exactly what it was asked to do.
What was not normal was the request. The withdrawal exploited a bug in Elements, the codebase Liquid runs on, and routed through a peg-out service operated by a Liquid trading service called SideSwap. SideSwap's authorization key was not compromised. The software that decides whether a withdrawal is legitimate was fooled into approving one that was not. An on-chain analyst known as ErgoBTC flagged the outbound transfer within minutes. Liquid paused the network, took its bridge nodes offline, and asked exchanges to suspend deposits and withdrawals of L-BTC, the Bitcoin-backed token that trades on the sidechain. For roughly 200 Bitcoin's worth of collateral, a network that institutions use to move Bitcoin between exchanges was suddenly backing a lot of tokens with very little.
Then came the strangest negotiation Bitcoin has hosted. The person or group holding the coins identified themselves as white hats and communicated by writing messages into Bitcoin transactions, where anyone could read them. They said they would return most of the funds once the vulnerability was patched across every node, and asked Blockstream to confirm. Blockstream answered in kind, with a PGP-signed message embedded on-chain: "Bridge nodes are patched, safe to return the funds." The signature checks out against the security key on Blockstream's website. By Tuesday, 3,400 Bitcoin had flowed back to the federation wallet.
That leaves 598 Bitcoin, worth about $46 million, still in the attackers' hands. Blockstream has refused to pay a ransom for it and says it is pursuing legal recovery. Ledger's chief technology officer, Charles Guillemet, questioned whether keeping 15% of the haul fits any definition of a bug bounty, and described it as closer to extortion. Block production on Liquid has resumed after emergency updates. Transactions and pegs, the actual movement of value on and off the sidechain, remain paused as of this weekend. Until Blockstream publishes updated reserve figures against the L-BTC in circulation, nobody outside the federation can say exactly how much Bitcoin backs each token.
Now the part that matters for anyone who holds Bitcoin rather than trades on Liquid. Bitcoin's base layer was never touched. The 4,000 coins moved because the rules of Liquid allowed them to, not because anything about Bitcoin failed. This is the second time in six weeks this newsletter has written that sentence. In issue #025 it was Coldcard, where a hardware vendor's random number generator failed and $88 million of single-signature wallets were emptied by arithmetic. Now it is a sidechain, where a federation of fifteen companies and the code they share approved a withdrawal they should not have. Different layers, same lesson: everything built on top of Bitcoin adds a trust assumption that Bitcoin itself does not have. A federation is fifteen counterparties. A bridge is a piece of software with permission to spend. A hardware wallet is a firmware team you have never met. None of that is a reason to avoid those layers. Liquid does genuinely useful things, and most of the coins came back. It is a reason to know, at every layer, exactly whose promise you are holding.
Bitcoin's own transparency did its usual work here. The theft, the negotiation, the patch confirmation, and the return were all visible to everyone in real time, on the same ledger, with no press release required. The 598 Bitcoin that remain outstanding are sitting in an address the whole world can watch. Whatever Blockstream's lawyers do next, they will not need to find the money.
2. The Hard Fork Nobody Followed
Bitcoin's summer of forks ended the way every one of them did, with the network declining to come along.
In issue #027 we covered BIP-110's minority chain freezing at two blocks and its backers escalating to a proof-of-work change, a plan to swap Bitcoin's mining algorithm so that the miners who ignored them could not follow. That chain split from Bitcoin at block 961,640 at the end of August and launched publicly around September 1, replacing SHA-256 with an algorithm called BLAKE2b. Every existing Bitcoin mining machine on earth is built for SHA-256 and cannot mine the new chain. That was the point. Luke Dashjr, the fork's most prominent backer, argued it would strip out a mining shortcut called ASICBoost that advantages the largest operators and would return block production to ordinary hardware.
What followed was silence. The new chain drew a trickle of hashrate. No major exchange listed it. No mainstream wallet, custodian, or Lightning implementation committed to supporting it. Neither CoinMarketCap nor CoinGecko tracks it. One small beta exchange opened trading under the provisional ticker BTCB2, and its order book told the whole story: bids topped out at $82, asks at $190, a spread of roughly 131%. There is a coin, technically, and there is almost nobody who wants it. Blockstream's Adam Back needed one line: "Live by the fork, die by the fork."
The human cost landed on one side. Dashjr resigned as chairman and chief technology officer of OCEAN, the mining pool he co-founded, and the company repurchased all of his equity. He continues to maintain that the chain he backs is the real Bitcoin and has taken to calling the main network "Spamcoin." The chain data does not agree with him, and neither does the market.
Here is what the whole arc, from a soft fork that could not reach 3% signaling to a hard fork that could not fill an order book, actually demonstrates. Anyone can copy Bitcoin's code. The code is free and always has been. What cannot be copied is the thing the code coordinates: the miners securing it, the exchanges pricing it, the wallets holding it, the millions of people who agree that this ledger is the one that counts. That agreement is the entire asset. It does not move because a developer, however talented, declares that it has.
One practical note, because bad advice is circulating on social media. Some posts have encouraged holders to import their seed phrases into fork wallets to claim BTCB2. Do not enter your seed phrase into any software you have not independently verified, for any coin, for any reason. That rule does not have exceptions, and a fork with a 131% spread is not a reason to invent one.
3. Tuesday and Wednesday
Two events this coming week were, by Friday evening, largely settled in advance.
The first is Wednesday's Fed decision, and the August inflation report on Friday decided it by the thinnest possible margin. Headline inflation came in at 3.4%, exactly as expected. Annual core inflation fell to 2.4%, its slowest pace since February 2021. On the surface, that is a report arguing for patience. But monthly core rose 0.3% against the 0.2% economists expected, and that single tenth of a point is why futures markets moved to roughly a 90% probability of a rate hike. CoinDesk's Fed watchers noted the detail that makes it painful: the actual figure was 0.29%, rounded up by the Bureau of Labor Statistics. Five hundredths of a percentage point the other way and the Fed would likely be holding. Kevin Warsh said in his first press conference that he did not want the Fed fixating on the number to the right of the decimal point. The market fixated for him.
Bitcoin's reaction told you how much of this was already priced. It dipped about a thousand dollars to $76,000 when the report hit, then rallied above $79,000 within hours as traders looked past a hike they had spent the week bracing for. It finished the week around $77,300. The energy story underneath is the same one we have followed since spring: gasoline rose 3.9% in August alone and oil crossed $105 on the Hormuz conflict, so the Fed is preparing to raise rates into the lowest core inflation in five and a half years because of a war it cannot influence. The ETF flows, meanwhile, answered last week's question. The funds shed $462.7 million across four straight red sessions, their worst week in ten weeks, immediately after the $987 million they took in the week before. August's bid was a bet on lower rates, not on Bitcoin, and a good share of it left the moment rates went the other way.
The second event is Tuesday at 2:15 in the afternoon, when the Senate votes on whether to begin debating the CLARITY Act. Republicans released revised text this week. Senator Ruben Gallego, one of two Democrats who voted the bill out of committee, called its ethics provisions "not a serious proposal," and no Democrat has moved since. Then two Republicans said the quiet part. Thom Tillis told Semafor the bill has no path unless the White House engages on the language requiring the president to divest from his crypto businesses, and Mike Rounds agreed it is likely to fail. Galaxy Research, which put the odds at 75% in May, now puts them at 10%. Treasury Secretary Bessent is urging yes votes on X regardless. The vote needs 60, Republicans hold 53 with several of their own uneasy about stablecoin yield, and no whip count shows the votes. Why hold a vote you expect to lose? Gallego answered that in August: "A fast vote gets you a fast result, but I'm not sure it's the result you want." If cloture fails Tuesday, the bill almost certainly dies with this Congress in January.
The Numbers
| Metric | Value |
|---|---|
| BTC Price | ~$77,300 (Sat Sept 12) |
| On the Week | down ~2.9%; high ~$80,000 (early week), low ~$76,000 (Fri) |
| From All-Time High | ~39% (peak $126,198) |
| Liquid Incident | ~4,000 BTC out; 3,400 returned; ~598 BTC (~$46M) outstanding |
| BLAKE2b Fork | live since block 961,640; BTCB2 spread ~131%; no major listings |
| August CPI | 3.4% headline; core 2.4% (66-month low); monthly core 0.3% vs 0.2% expected |
| Sept 16 Hike Odds | ~90% |
| Spot ETF Flows (Sept 8-11) | -$462.7M, four red sessions, worst week in ten |
| CLARITY Cloture Vote | Tues Sept 15, 2:15 pm ET (Galaxy 10%) |
What to Watch Next Week
Tuesday, 2:15 pm: the CLARITY cloture vote. Sixty or bust. Watch for any White House statement on divestment before then, and watch which Democrats, if any, break. A failed vote likely ends the bill for this Congress.
Wednesday: the Fed. A hike is priced at roughly 90%. What is not priced is Warsh's framing. One-and-done language and Bitcoin likely shrugs. Anything implying a series of hikes is a different market.
Liquid's reserve disclosure. The number that matters is Bitcoin held against L-BTC outstanding. Watch for Blockstream to publish it, for pegs to resume, and for any movement in the address holding the remaining 598 coins.
Whether the ETF bleed stops. Four red sessions into a Fed hike is the test the August inflows never faced. A return to inflows after Wednesday would say the money was waiting for certainty. Continued outflows would say it wanted lower rates.
Free Tools
Track price, sentiment, ETF flows, and network health in one place with Bitcoin Pulse, our free live dashboard. No account required.
A week where $320 million moved on a bug and rate expectations moved on a rounding error is the argument for a fixed schedule over trying to predict either. See what steady buying through the drawdown would have done with the DCA Calculator.
New here? Start with Intro to Bitcoin or browse the Bitcoin Glossary.
New to Bitcoin? → Intro to Bitcoin
Explore every term → Bitcoin Glossary
Bitcoin Legacy
Two stories this week were about layers of trust built on top of Bitcoin, and what happens when one of them fails. The most fragile layer most holders have is not a sidechain or a firmware team. It is the gap between what they know about their own coins and what their family knows.
If something happened to you tomorrow, could the people you love recover your Bitcoin? For most holders the honest answer is no. The keys sit in a drawer or a safe, the instructions live in your head, and the people who would need them have never seen a seed phrase.
Legacy is the tool we are building to close that gap. Answer a short set of questions about how you hold your Bitcoin, and it generates three printable documents: a letter explaining what you own and where it is, a First 48 Hours guide written for someone who has never touched Bitcoin, and a security checklist. It works with hardware wallets, exchanges, multisig, and mobile wallets.
The sensitive fields stay blank by design. Seed phrases and PINs get written by hand after you print, never typed into anything. Nothing you enter is stored or sent anywhere. It runs entirely in your browser, and there is no account to create.
Legacy is in development. Join the waitlist.
Bitcoin Weekly is published every week by 21VOX. Written by Karl. No financial advice. Just signal.