Liquid Network vulnerability leads to unauthorized minting of nearly 4,000 L-BTC

A cache key collision vulnerability in the Liquid Network allowed for the unauthorized minting of approximately 3,998.5 L-BTC on September 6. The attacker exploited a performance optimization present in the codebase since 2016 to bypass the peg-in mechanism and redeem real BTC on the Bitcoin mainnet. While 3,400 BTC was returned to the federation, 598.5 BTC remains with the attacker, who is publicly demanding a 10% bounty via on-chain messages.