Crypto Exchange Liquid Recovers Majority of Stolen Funds After Alleged White‑Hat Hack

Liquid, the Japanese‑based cryptocurrency exchange, announced that it has retrieved $263 million of the $320 million taken from its federation wallet earlier this month, signaling a rare instance of a large‑scale theft being partially reversed.

According to the exchange, a group of self‑identified white‑hat hackers accessed the wallet, siphoned the assets, and then demanded that Liquid address a critical vulnerability in its code. The perpetrators claimed they intended to expose the flaw rather than profit from the theft, a narrative that has sparked debate within the security community about the line between ethical hacking and criminal activity.

Liquid’s federation wallet, which aggregates assets from multiple custodial partners to facilitate high‑volume trading, was targeted in what security analysts describe as a sophisticated exploitation of a smart‑contract bug. The breach underscores the ongoing challenges faced by crypto platforms that must balance rapid product development with rigorous security audits.

After the initial loss, Liquid engaged with the hackers, offering technical assistance and a bug‑fix patch in exchange for the return of the funds. The exchange reports that the hackers complied, sending back $263 million, while retaining a portion of the proceeds. No official statement has been released regarding the exact amount kept by the attackers or the terms of the agreement.

Regulators in Japan and other jurisdictions have taken note of the incident, emphasizing the need for stronger oversight of digital asset custodians. The Financial Services Agency (FSA) has previously warned exchanges about the systemic risks posed by inadequate security controls, and this episode may prompt tighter compliance requirements.

Industry observers say the partial restitution could set a precedent for how crypto firms handle future breaches, potentially encouraging more collaborative approaches between exchanges and ethical hackers. However, critics warn that rewarding any return of stolen assets might inadvertently legitimize illicit tactics. Liquid has pledged to complete a comprehensive security review and to enhance its bug‑bounty program, aiming to deter similar attacks and restore confidence among its user base.