Liquid White-Hat Hacker Returns 3,400 BTC, Holds 598.5 BTC

The Liquid white-hat hacker returned 3,400 BTC to Liquid Federation at 09:09 Pacific Time, according to Bitcoin News monitoring. Encrypted communication between the hacker and Blockstream continued afterward. The hacker sent a new PGP-encrypted message to Blockstream at 09:51, while Blockstream replied from a new address with an encrypted and PGP-signed message at 10:40. At 11:07, the hacker spent the 1,000-satoshi amount attached to Blockstream’s message, confirming that the latest exchange belonged to the same communication thread. The contents of the messages remain unknown. The Liquid white-hat hacker still controls approximately 598.5 BTC. For traders, the returned funds reduce immediate liquidation and recovery concerns, but the remaining BTC and ongoing encrypted communication remain potential sources of market uncertainty. Monitoring wallet activity and any further transfers is likely to be more significant than the communication itself.
Neutral
The market impact is neutral because the hacker has already returned 3,400 BTC, reducing the immediate risk of a large forced sale or permanent loss. However, approximately 598.5 BTC remains under the hacker’s control, and continued encrypted communication leaves the final outcome unresolved. In the short term, traders may watch the relevant wallets for transfers to exchanges, which could create selling pressure, or for additional returns, which could improve sentiment. Until such movements occur, the event is unlikely to materially change Bitcoin’s broader trend, liquidity conditions, or market structure. Similar incidents involving stolen or disputed crypto funds have often produced temporary volatility when large wallets move, but limited lasting impact when assets remain inactive or are recovered. Over the longer term, the case could influence views on exchange security, asset recovery procedures, and counterparty risk, but it does not currently provide a clear bullish or bearish signal for BTC.