An attacker exploited two Elements consensus bugs on 6 September 2026, minting about 4,000 unbacked Liquid Bitcoin and withdrawing the same value in BTC. Blockstream halted the network and recovered 3,400 BTC after the attacker returned them.