# protocol exploit — X 热门讨论 (2026-09-11 14:54 UTC)
## @Ehsan1579 (Ehsan) · 09-11 12:17 · ♥111 ↻6 💬4 First of all, poor hygiene of code in your protocol is the main reason you got hacked. There are so many more concerning issues in your elements codebase but instead of learning your lesson and going back to work, you’re complaining about it. As a matter of fact, I disclosed an encrypted vulnerability report days ago to your team and I still haven’t heard back, maybe instead of tweeting nonsense like this, go look in your inbox.
Second of all, open sourcing in blockchain field is so common that using it as an excuse is laughable (we got hacked because our codebase was open sourced). What a joke.
Unfortunately users had to pay for your negligence and carelessness for security, but instead of taking accountability, you come and post something like this acting as a victim like nobody else was going to exploit it soon or later anyways. Those hackers should be thanked for their work, if North Korean hackers got to your protocol you wouldn’t have even seen a cent of the 85% that you have today.
Protocols don’t get hacked by accident, most times it’s always projects with this exact tone and victim mentality that this happens to. I’ve seen many that actually cared about their security, they paid big bounties and actually had a bounty page and they still got hacked. Those are the only protocols that I would feel bad for because they did all they could do, so they would deserve a break and some credit, and they still come and take accountability and apologize to their users.
The norm in blockchain cybersecurity has always been 10% of the damages, in this case they already returned 85%, if you’re gonna call them criminals, what was the point of them returning the 85%? Could’ve been criminals with all of the money. > 引用 @Blockstream: To those responsible for the theft of bitcoin from the Liquid Network:
Blockstream will not pay a ransom for the return of stolen funds. Taking assets without authorization and withholding their return is a crime, not responsible disclosure. It is not white-hat activity. It is theft.
We have engaged in good faith in an effort to secure the return of stolen user funds and protect the broader Bitcoin community. That effort should not be mistaken for acceptance of the actions taken nor of the terms being demanded.
We will not be a party to the precedent that open-source software developed for the good of the Bitcoin community should subject its developers to paying a ransom that far exceeds their economic participation.
Bitcoin is hard money and can’t be minted without costs, Bitcoin doesn’t haircut users to pay a ransom.
To the Bitcoin community:
We are fighting for what we believe in, for the users whose funds were taken, and for the principles on which Bitcoin was built.
The community has demonstrated incredible resolve with teams of people dedicating their time in support of each other to identify and patch vulnerabilities in each other's products and systems. We are all driven by the mission that Bitcoin is the single best asset, for every person, company, and institution on the planet to invest, use, and build on. The world is a different place with the advancements of AI, and the Bitcoin community has responded with force to combat that threat.
Damage has been done, battles have been lost, but on the whole the Bitcoin community is gaining ground in the war with bad actors.
We want to thank the community for those efforts, for your support in hardening the network, helping users recover funds, and for your support in our assertion that crime does not deserve rewards.
To those holding the stolen bitcoin:
There is still an opportunity to resolve this responsibly. The bitcoin can be returned and we can revert to the standard of white-hat principals.
However, if the funds are not returned, we will pursue every lawful avenue available to us. We will work with law enforcement, exchanges, service providers, forensic specialists, and other relevant parties to trace and recover the assets and identify those responsible.
More importantly, Bitcoin is transparent by design and the community is made up of the most sophisticated engineers, cryptographers, and white-hat hackers globally. Transactions do not disappear, and neither does the evidence they leave behind.
We will not pay for the return of stolen property. We will not abandon our users. The Bitcoin community will not stop pursuing the funds.
Return the bitcoin. https://x.com/Ehsan1579/status/2098385504135745738
## @osint_based (VAL) · 09-11 10:50 · ♥28 ↻1 💬1 ‼️ $750,000 lost due to an exploit
Symbiosis protocol faced an incident earlier today on BSC
Team halted bitcoin related swaps and is deploying updates
Symbiosis already sent an onchain message to the attacker controlled wallet proposing a 20% bounty and treating the incident as a white-hat disclosure
With a 48h deadline
Attacker swapped all funds to $ETH and everything is still sitting on this wallet
0x7cd28D8E6210E6E4A8b1947FC9b44DC01C600192 https://x.com/osint_based/status/2098363619922559055
## @anuragdotdev (Anurag Jha) · 09-11 13:03 · ♥22 ↻1 💬1 Authentication & Authorization for Backend Engineers https://x.com/anuragdotdev/status/2098397084244475988