Liquid Network Initiated Security Audit of Elements v23.3.4
The sidechain developer has begun an external review of its emergency software patch to enable the resumption of peg-outs.
Updated on Sept. 29, 2026 in Cybersecurity
Live Poll
Do you trust financial platforms that have recently paused user withdrawals to perform security updates?
The Liquid Network has launched an independent security audit of its Elements v23.3.4 software, an emergency update released following the discovery of a proof-verification caching vulnerability. While internal transfers and block production resumed on September 10, 2026, peg-out withdrawals from the Bitcoin sidechain remain paused pending completion of the audit.
Why it matters
The audit and subsequent key management procedures are required to ensure the security of the sidechain before peg-out functionality is restored to users. This process addresses the underlying vulnerability while the Liquid Federation updates its authorization infrastructure to prevent future unauthorized access.
The Liquid Network is currently auditing the Elements v23.3.4 software build. This version addresses a specific flaw involving proof-verification caching that necessitated the emergency update.
The players
Liquid Network
A Bitcoin layer-2 sidechain designed for faster and more confidential transactions.
Liquid Federation
The group of organizations responsible for the governance and security of the Liquid Network.
The details
The vulnerability centered on the caching mechanism for proof verification, which could have been exploited if left unpatched. To secure the peg-out process, the Liquid Federation is now transitioning existing authorization keys into cold storage, a security method that keeps private keys offline. They are also replacing entries in the peg-out authorization key list as part of the safety hardening process required to restart withdrawals.
Timeline
September 9, 2026: Liquid released the Elements v23.3.4 emergency update.
September 10, 2026: Block production and L-BTC transfers resumed.
The Tech Race
This audit follows the industry standard of conducting rigorous external code reviews before restoring full asset-movement functionality after a vulnerability. It marks a departure from rapid-deployment cycles by prioritizing verified security measures over immediate restoration of all system features.
Users can continue to perform block production and L-BTC transfers as these services resumed on September 10, 2026. However, those attempting to execute peg-out withdrawals must wait for the Federation to complete the current audit and finalize the update of the authorization key list.
The takeaway
The Liquid Network is prioritizing a full security audit to ensure the integrity of its peg-out keys before allowing asset withdrawals to resume. Users should monitor official announcements from the Liquid Federation for the confirmed date when the peg-out functionality is restored.
Further reading
For more background on how sidechains manage security protocols, visit our Cybersecurity section.
Live Poll
Do you trust financial platforms that have recently paused user withdrawals to perform security updates?
