Bitcoin Info News Logo
Bitcoin NewsAlt Coin NewsMiningBlockchain EventTop ProjectSponsored ArticlesPress Release
Bitcoin NewsAlt Coin NewsMiningBlockchain EventTop ProjectSponsored ArticlesPress Release
Sponsorship
Sponsorship
Home/Crypto News/Hackers Return 85% of Bitcoin Stolen in Bridge Attack
Crypto News

Hackers Return 85% of Bitcoin Stolen in Bridge Attack

John Kojo Kumi
Bitcoin Info News Logo

Bitcoin Info News is an independent digital publication focused on Bitcoin, crypto markets, blockchain infrastructure, regulation, and adoption.

Follow on Google

Contact the editorial teamView newsroom and editorial contacts

Social

FacebookYouTubeTelegramXLinkedIn
John Kojo Kumi
Published:Sep 8, 2026
3 MIN READ
MakeBitcoin Info Newspreferred onGoogle

Reports indicate that the attackers behind last week’s Bitcoin bridge exploit have returned the bulk of the stolen coins, with the headline figure putting the reversal at 85% of the original haul. The remaining balance, and whether affected users have been made whole, remains unconfirmed.

Reports indicate that the attackers behind last week’s Bitcoin bridge exploit have returned the bulk of the stolen coins, with the headline figure putting the reversal at 85% of the original haul. The remaining balance, and whether affected users have been made whole, remains unconfirmed.

WHAT TO KNOW

  • The report states that hackers returned 85% of the Bitcoin taken in last week’s bridge attack.
  • The status of the remaining 15% is unverified in the available information, and no reimbursement to users has been confirmed.

What the 85% Return Figure Does and Does Not Establish

The central claim is that a large majority of the coins moved back toward the compromised bridge. That reversal figure has not been matched to a specific transaction record, a named bridge, or an absolute quantity of Bitcoin in the material available for this report. For related coverage, see Citi Disclosed Buying Bitcoin: What It Means for BTC.

Because no denominator has been verified, the return should be read as a proportion of the reported loss rather than a confirmed satoshi amount. It is not yet clear whether the funds are native Bitcoin, a wrapped representation, or a dollar-denominated estimate.

Movements of this kind are ultimately settled on the base layer, where each transfer carries a verifiable transaction hash, timestamp, and sender and receiver address. Any return can therefore be independently confirmed on a block explorer such as Mempool.space once the relevant addresses are identified.

Critically, coins arriving at a bridge-controlled address are not the same as reimbursements reaching individual users. Custody by the bridge operator is a necessary step toward recovery, not proof that depositors have been repaid.

What Is Known About Last Week’s Bridge Attack

The available information describes an attack on a Bitcoin bridge that occurred last week, followed by the partial return. It does not fix the bridge’s name, the exact date of the exploit, the size of the original loss, or the mechanism the attackers used.

This incident echoes recent bridge-related thefts covered on this site, including the case in which Liquid halted after hackers took 4,000 BTC and the on-chain standoff where stolen BTC came with demands posted on chain. Whether the current event is connected to those has not been established here.

Operators have at times responded by hardening infrastructure and communicating directly with attackers, as when Blockstream said its bridge nodes were patched in a message to the hacker. No such response has been confirmed for last week’s incident.

The Questions Left Open by the Remaining Bitcoin

An 85% return implies a 15% arithmetic remainder, assuming the percentage is accurate and measured against the full amount taken. That remainder is an implied balance, not a verified permanent loss or a confirmed attacker-held sum.

There is no information on whether further returns are expected, whether a reimbursement plan exists, or whether the bridge has resumed normal operation. The retained portion should not be described as a bounty, settlement, or fee without evidence, and prior exploits show recoveries can shift after initial reports, including cases where a bug behind a nine-figure Bitcoin theft surfaced only later.

Until the bridge, the addresses, and the transaction hashes are confirmed, the recovery remains a reported figure rather than a settled outcome. On Bitcoin, that verification is available to anyone willing to trace the coins on chain, which is where this story will ultimately be resolved.

Additional source references: source document 1.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.

Article Topics

Crypto News

Editor Picks

If You Only Read 3 Things Today

Fastest way to catch the signal before you keep scrolling.

#1 Liquid Network Hackers Reportedly Return 3...#2 Capital B Buys 29 Million in...#3 Liquid Recovers 3 400 BTC Bitcoin...

Most Read

1

Liquid Network Hackers Reportedly Return 3,400 BTC

Sep 8, 2026•3 MIN READ
2

Capital B Buys $29 Million in Bitcoin

Sep 8, 2026•2 MIN READ
3

Liquid Recovers 3,400 BTC: Bitcoin Recovery Details

Sep 8, 2026•4 MIN READ
4

Hackers Return 85% of Bitcoin Stolen in Bridge Attack

Sep 8, 2026•3 MIN READ
5

Bitcoin Miner Position Index at -1.2, Says Bitfinex

Sep 8, 2026•2 MIN READ

Quick Categories

Bitcoin News
Alt Coin News
Mining
Blockchain Event
Top Project

Partnerships

Advertise With Us

Reach active Bitcoin readers, builders, and spenders.

Learn More
Megaphone
CoinMarketCap

Company

  • About Us
  • Authors
  • Masthead
  • Team Verification
  • Contact Us

Resources

  • RSS Feeds
  • Editorial Policy
  • Corrections Policy
  • Terms of Service
  • Privacy Policy
  • Disclaimer
  • Sitemap

Tools

Quick access to the site tools and map-driven utility pages.

BTC Merchant MapToolMerchants by CountryToolTop Merchant CountriesToolGovernment Holdings MapTool

Coverage

RSS Feeds

Follow the core desks readers use most across Bitcoin, altcoins, mining, events, and sponsored coverage.

Bitcoin NewsDeskAlt Coin NewsDeskMiningDeskBlockchain EventDeskTop ProjectDeskSponsored ArticlesDesk

© 2026 BitcoinInfoNews.com. All rights reserved.

Independent Bitcoin and crypto coverage with public trust, policy, and newsroom pages available sitewide.

Sponsored Articles
Press Release
Millionaire