Liquid Federation members are preparing a coordinated restart after purported white-hat actors returned exactly 3,400 BTC to the federation wallet, restoring about 85% of the Bitcoin removed in a security incident. Roughly 4,000 BTC, valued at about $320 million at the time, was withdrawn from reserves of about 4,200 BTC, while the returned Bitcoin was valued at roughly $270 million. JAN3 CEO and former Blockstream executive Samson Mow said about 598 BTC remains outstanding after Blockstream confirmed affected bridge nodes had been patched. Liquid remains paused while Blockstream and federation members address further security issues, resolve a chain split and prepare a safe restart. The withdrawal was processed through SideSwap's Peg-out Authorization Key, which Liquid and SideSwap said was not compromised; SideSwap attributed the L-BTC used in the incident to a bug in the Elements software underpinning Liquid. Blockstream has not disclosed repayment terms or described the unrecovered Bitcoin as a bounty.