On 2026-09-07, three independent newsrooms reported that the Liquid Network, a Bitcoin sidechain used by several exchanges, saw roughly $320 million withdrawn in a hack. This is a fast-moving story with many details still unconfirmed. Here is what the headlines actually support, what it mechanically means for anyone holding Bitcoin, and the specific things you can check in your own portfolio right now.
What happened to the Liquid Network on 2026-09-07?
On September 7, 2026, the Liquid Network, a Bitcoin-based sidechain used by exchanges, was hit by an exploit in which roughly $320 million was withdrawn. Three separate newsrooms, Seeking Alpha, Investing.com and CoinDesk, reported the event within a roughly 76-minute window early that morning UTC.
The core facts the headlines support are narrow and worth stating plainly:
- The affected network is described as a Bitcoin sidechain or Bitcoin-linked network used by exchanges.
- The reported amount withdrawn is $320 million.
- Per CoinDesk, the attackers reportedly claim to be the "good guys".
Everything beyond those points is, as of this writing, unconfirmed. That honest uncertainty matters more than any guess.
What is the Liquid Network?
The Liquid Network is a Bitcoin sidechain, a separate blockchain that connects to Bitcoin and is used by exchanges and traders to move value between platforms. A sidechain is not the Bitcoin main chain itself. It is a linked layer with its own rules and its own security model.
That distinction is the single most important thing to understand today. An exploit on a sidechain is not the same event as a compromise of the Bitcoin base layer, and the headlines do not claim the Bitcoin protocol itself was broken.
Was Bitcoin itself hacked?
No. The headlines describe a Bitcoin-linked or Bitcoin-based network, specifically the Liquid Network sidechain, not the Bitcoin main blockchain. There is nothing in the three reports stating that Bitcoin's core protocol was compromised.
This is a recurring source of confusion in crypto headlines. "Bitcoin network used by exchanges" reads alarmingly, but mechanically it points at a layer built alongside Bitcoin, not at the roughly $2 trillion base asset itself.
What remains unknown as of the morning of September 7:
- Exactly how the exploit worked at a technical level.
- Whether the $320 million figure is final or an early estimate.
- Which specific exchanges or users held funds on the network.
- Whether the funds will be returned, given the attackers' reported "good guys" claim.
When a story is hours old, saying "we do not know yet" is the accurate answer, not a placeholder.
How does this connect to your portfolio?
Your exposure depends on where your Bitcoin actually sits, not on the headline. A holder's relationship to this event falls into a few clear buckets, and you can identify yours in minutes.
| Where your BTC sits | Direct link to Liquid? | What to check |
|---|---|---|
| Self-custody Bitcoin (main chain) | No direct link | General BTC price exposure only |
| BTC on a major exchange | Possible, unconfirmed | Whether that venue used Liquid |
| Bitcoin ETF shares | No direct link | Price and sentiment exposure |
| Liquid-based assets (L-BTC) | Direct | Follow the operator's statements |
Most retail holders own Bitcoin through an exchange balance, a self-custody wallet, or a spot Bitcoin ETF. If that describes you, your near-term exposure is primarily to how the BTC price reacts, not to the exploited funds directly.
If you track everything in one place, this is easier to answer. With PortfolioTrackr you can see every Bitcoin holding across wallets, exchanges and ETF positions in a single view, which is the whole point of using a tracker that shows stocks and crypto together instead of jumping between apps.
What can a PortfolioTrackr user do right now?
Right now you can do three concrete, non-advisory things: check your exposure, set a price alert, and review how your position sits against your own targets. None of these tell you to trade. They tell you where you stand.
1. Check your total Bitcoin exposure
Open your holdings and total up everything tied to Bitcoin: spot BTC, Bitcoin ETF shares, and any tokens or products built on Bitcoin layers. Knowing your real percentage exposure is the difference between reacting to a headline and understanding your own position.
- Add up BTC across every wallet and exchange.
- Include ETF exposure such as spot Bitcoin funds.
- Note any assets specifically on the Liquid Network, which are the only ones with a direct line to this event.
You do not need to connect a broker to do this. In PortfolioTrackr, manual entry, CSV import, a screenshot of your exchange balance, or voice and text entry all work on every plan. Connecting a broker through the SnapTrade bridge or a direct integration is optional, not required.
2. Set a price alert within a minute
PortfolioTrackr checks every position and every watchlist level once a minute, around the clock, so you hear within a minute of your chosen level being hit. On a fast-moving crypto story, that means you can step away from the screen and still know if BTC-USD crosses a level that matters to you.
Watchlist alerts are a Pro and Lifetime feature. A useful setup during a breaking event:
- An alert on your BTC entry level or a round number you care about.
- An alert on any exchange token you hold that is exposed to the venues named in later reporting.
- A recurring alert if you want repeated notification, which fires at most once every 5 minutes for the same target.
3. Review your allocation against your own plan
Look at what share of your total portfolio is in crypto and whether that still matches the plan you set before today. PortfolioTrackr reports status against your own levels, such as still below target or stop-loss level reached. It reports where you stand; it does not tell you what to do.
If you are weighing whether to hold your Bitcoin alongside equities in one dashboard, our comparison of the best portfolio trackers in 2026 walks through how the tools handle mixed stock and crypto portfolios.
How does this compare to past crypto exploits?
Large crypto exploits follow a familiar pattern in the first hours: an early loss estimate, confusion about scope, and a price reaction that often moves faster than confirmed facts. The $320 million figure here is an early number and may be revised.
We saw a smaller-scale version of this recently. When a token was drained in a targeted attack, the price gapped hard before facts settled, which we covered in our breakdown of the AVICI hack and how holders checked their exposure. The lesson that transfers is simple:
- Early loss figures are estimates, not audited totals.
- The token or network at the center often reacts more than the broader asset.
- "White hat" or "good guys" claims, like the one reported here, sometimes precede fund returns and sometimes do not.
Broader Bitcoin sentiment can also be shaped by flows that have nothing to do with a single exploit, which is why context like ongoing Bitcoin ETF inflows matters when you read a red candle.
What should Bitcoin holders watch next?
Watch for the network operator's official statement and confirmation of the final loss figure. These are the facts that will turn today's uncertainty into something you can actually assess. Specific things to monitor over the coming hours and days:
- An official statement from the Liquid Network operator confirming scope and cause.
- Whether the $320 million estimate holds, rises or falls.
- Which exchanges, if any, paused deposits or withdrawals in response.
- Whether the attackers' reported "good guys" claim results in any funds being returned.
- How BTC-USD trades once the initial headline reaction settles.
Until those land, treat every number beyond the confirmed $320 million and the Liquid Network name as provisional.
The bottom line
On September 7, 2026, roughly $320 million was withdrawn from the Liquid Network, a Bitcoin sidechain used by exchanges, in a hack corroborated by three newsrooms. The Bitcoin base protocol itself was not reported compromised, and most retail holders are exposed to price and sentiment rather than to the drained funds directly.
What you can do without guessing at unknowns is concrete: check your total Bitcoin exposure, set a price alert so you hear within a minute if a level you care about is reached, and review your allocation against your own targets. Those are things you control on a day when most of the facts are not in yet.
Crypto and stocks in one portfolio
Track coins alongside equities, ETFs and funds, in your own base currency, with the same alerts and P&L on both.
Start Free Trial
Frequently asked questions
Was Bitcoin itself hacked in the Liquid Network exploit?
No. The headlines describe the Liquid Network, a Bitcoin sidechain used by exchanges, not the Bitcoin main blockchain. There is no report that Bitcoin's core protocol was compromised. A sidechain is a separate, linked layer with its own security, so this event is distinct from an attack on Bitcoin itself.
How much was taken in the Liquid Network hack?
Three newsrooms reported roughly $320 million was withdrawn on September 7, 2026. That figure is an early estimate and could be revised as the network operator confirms the scope. Treat it as provisional until an official statement lands with a final loss total.
Am I affected if I hold Bitcoin on an exchange?
It depends on whether that exchange used the Liquid Network, which the headlines do not fully specify yet. Most retail holders are exposed to Bitcoin's price reaction rather than the drained funds directly. Watch for statements from your specific exchange about deposit or withdrawal pauses.
How can I track my total Bitcoin exposure across wallets and exchanges?
PortfolioTrackr shows every Bitcoin holding across wallets, exchanges and ETF positions in one view. You can add positions by manual entry, CSV, a screenshot, or voice and text on every plan. Connecting a broker is optional, so you can total your exposure in minutes without linking accounts.
Can I get alerted if Bitcoin's price moves during a breaking event?
Yes. PortfolioTrackr checks every position and watchlist level once a minute, around the clock, so you hear within a minute of your chosen level being hit. Watchlist alerts are a Pro and Lifetime feature. Recurring alerts repeat for the same target at most once every five minutes.