Liquid

Galaxy

Read

Dubai

Future

<p><strong>A single Bitcoin transaction moving 3,400 BTC has been tied by an unconfirmed headline to Galaxy Digital Head of Research Alex Thorn and an alleged theft from the Liquid Federation, but the only part independently verifiable on-chain is the transfer itself. For traders across Southeast Asia watching Bitcoin custody risk, the case shows how quickly an on-chain movement gets wrapped in a narrative the data does not yet support.</strong></p><h2 id="alex-thorn-s-statement-on-the-liquid-federation-hackers">Alex Thorn's Statement on the Liquid Federation Hackers</h2><p>The circulating headline names Alex Thorn, identified as Galaxy Digital Head of Research, as the source of a claim that hackers who stole funds from the Liquid Federation returned Bitcoin to an original Federation address. The wording available to us stops before the statement is complete, and no original post or direct attribution has been located. For related coverage, see <a href="https://www.kanalcoin.com/polynext-awards-conference-dubai-2026-advancing-the-global-dialogue-on-plastic-recycling-and-circularity/" rel="noopener noreferrer nofollow">PolyNext Awards &amp; Conference Dubai 2026: Advancing the Global Dialogue on Plastic Recycling and Circularity</a>.</p><div class="tldr" style="background:#f8fafc;border:1px solid #d1d5db;border-radius:8px;padding:16px 20px;margin:20px 0;"><p style="margin:0 0 8px;font-weight:700;">TLDR Keypoints</p><ul style="margin:0;"><li>The headline names Alex Thorn and his role as Galaxy Digital Head of Research.</li><li>It references hackers who allegedly stole funds from the Liquid Federation.</li><li>The full statement and the incident details are absent from the available material.</li></ul></div><h3 id="what-the-headline-attributes-to-thorn">What the Headline Attributes to Thorn</h3><p>According to unconfirmed reports, Thorn linked the returned Bitcoin to an attacker communicating with Blockstream via OP_RETURN before sending the funds back. No public statement, message transaction, or decoded OP_RETURN text has been obtained to confirm this, so the attribution should be read as an unverified claim rather than an established quote. For related coverage, see <a href="https://www.kanalcoin.com/ainext-awards-conference-dubai-2026-where-ai-leaders-innovators-and-decision-makers-shape-the-future-of-artificial-intelligence/" rel="noopener noreferrer nofollow">AINext Awards &amp; Conference Dubai 2026: Where AI Leaders, Innovators and Decision-Makers Shape the Future of Artificial Intelligence</a>.</p><h2 id="the-liquid-federation-funds-theft-referenced-in-the-headline">The Liquid Federation Funds Theft Referenced in the Headline</h2><p>The headline refers to hackers who stole funds from the Liquid Federation, the multi-party operator group behind the Bitcoin sidechain. Blockstream's May 11, 2026 roadmap describes Liquid as a production deployment of Elements run by a <a href="https://blog.liquid.net/blockstream-shares-liquid-development-roadmap-0-conf-pq-readiness-bitvm-more/" rel="noopener noreferrer nofollow">15 functionary operator set</a> managing Bitcoin peg-in outputs, useful background but not confirmation of any theft. For related coverage, see <a href="https://www.kanalcoin.com/agrinext-awards-conference-dubai-2026/" rel="noopener noreferrer nofollow">AgriNext Awards &amp; Conference Dubai 2026: Where Agriculture Leaders, Innovators and Investors Shape the Future of Food Systems</a>.</p><h3 id="details-available-in-the-supplied-headline">Details Available in the Supplied Headline</h3><p>The name Liquid Federation is preserved as supplied; its identity and relationship to the Liquid Network are not established by the headline alone. The Federation's own Q1 2026 update reported 87 members and 14,063 peg-ins totaling <a href="https://blog.liquid.net/liquid-federation-quarterly-update-q1-2026/" rel="noopener noreferrer nofollow">1,252 BTC</a>, historical operating figures that do not describe any incident balance.</p><p>Crucially, the available material does not specify the amount originally stolen, the attack method, or the timing of any breach. We are not adding hacker identities, affiliations, laundering routes, or recovery claims that the evidence does not support.</p><p>What can be verified is one Bitcoin payment. Output index 1 of transaction a6d697...9a46d pays exactly 3,400 BTC, confirmed in block 965950, per <a href="https://mempool.space/tx/a6d697a25266ce3c78774fd1d75f896b7af522ada209b0f6228ea497bc49a46d" rel="noopener noreferrer nofollow">the on-chain record</a>. Both the sending and receiving addresses remain unattributed.</p><figure style="margin:24px 0;padding:24px;border:1px solid #d1d5db;border-left:4px solid #2563eb;border-radius:8px;background:#f8fafc;color:#111827;font-family:Arial,sans-serif;"><p style="margin:0 0 8px;font-size:15px;line-height:1.5;font-weight:700;">Verified Bitcoin transaction output</p><p style="margin:0 0 12px;font-size:40px;line-height:1.2;font-weight:700;">3,400 BTC</p><figcaption style="margin:0;font-size:14px;line-height:1.6;color:#374151;"> Output index 1 contains 340,000,000,000 satoshis (3,400 BTC), confirmed in Bitcoin block 965950 on September 7, 2026 at 16:09:25 UTC. Wallet ownership and attribution as a return of stolen Liquid Federation funds remain unverified. </figcaption></figure><div class="on-chain-data" style="background:#0d0f17;border-left:3px solid #ff7043;padding:16px 20px;margin:20px 0;border-radius:4px;"><p style="margin:0 0 8px;color:#ff7043;font-weight:600;font-size:14px;">ON-CHAIN DATA</p><ul style="margin:0;color:#e6edf3;"><li><strong>Amount:</strong> 340,000,000,000 satoshis (3,400 BTC)</li><li><strong>To:</strong> bc1qdlld6antmv4xug242ed83q7k4rqw50cwfns38szx4qu2f4jwaxxsuhwxxr (unverified)</li><li><strong>From:</strong> inputs associated with bc1ql4mfu6aundtkksxklfajs2h3t9nzcd6gyqjlte (unverified)</li><li><strong>Block:</strong> #965950 (September 7, 2026, 16:09:25 UTC)</li></ul></div><p>Notably, this transaction has two outputs and neither carries an OP_RETURN script, so the alleged Blockstream negotiation, if it happened, would sit in separate transactions that have not been produced. No transfer-time USD value was recorded; Bitcoin traded at <a href="https://www.coingecko.com/" rel="noopener noreferrer nofollow">$79,185</a> in the current snapshot, which is not the value at the time of the move.</p><h2 id="what-remains-unconfirmed-about-thorn-s-comments">What Remains Unconfirmed About Thorn's Comments</h2><p>The headline ends with an ellipsis after Liquid Federation, and no supporting research text accompanies it. To turn this into a substantiated report, the full Thorn statement, its original publication venue, and its date are all needed.</p><h3 id="full-statement-and-supporting-evidence">Full Statement and Supporting Evidence</h3><p>Beyond the statement itself, the incident's entity identification requires source material linking either address to the Federation or to an attacker. The original theft transaction, the exploit method, and the share of funds recovered are all missing from the evidence at hand.</p><p>For regional readers, the takeaway is procedural. Southeast Asian venues such as Indodax, Tokocrypto, and Coins.ph increasingly custody Bitcoin against sidechain and bridge exposure, and this episode is a reminder to trace claims back to explorers, as the earlier <a href="https://www.kanalcoin.com/coldcard-hacker-moves-7-7-million-btc-third-attack-wave/" rel="noopener noreferrer nofollow">Coldcard hacker fund movements</a> showed. It also connects to ongoing coverage of the <a href="https://www.kanalcoin.com/weekly-crypto-forecast-liquid-network-zcash/" rel="noopener noreferrer nofollow">Liquid Network's roadmap and market outlook</a>. Until an official Federation confirmation appears, the 3,400 BTC transfer stands as verified data attached to an unverified story.</p><p style="font-size:13px;color:#888;border-top:1px solid #333;padding-top:12px;margin-top:30px;">Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.</p><a href="https://www.kanalcoin.com/?p=69099" rel="noopener noreferrer nofollow">Read original article on kanalcoin.com</a>

Alex Thorn on Hackers Who Stole Liquid Federation Funds

Table of Contents

Kanalcoin

Other articles published on Sep 8, 2026

Best Crypto to Explode? SOL Price Prediction Points to $120 as Apeing’s Upcoming Crypto Presale L...

Liquid Network Hackers Reportedly Return 3,400 BTC

AfD state-election win raises pressure on Germany’s Bitcoin tax fight

Germany's Crypto Holding Period: Petition 201716 Closes on September 15, and What Happens Next

Hunter Biden Is Launching a LAPTOP Meme Coin – and TRUMP Losers Are Getting an Airdrop

PancakeSwap traded about $75M of bStocks in a day

Join our free newsletter for daily crypto updates!