Galaxy’s Alex Thorn Says Liquid’s Approved-Address Rule Didn’t Stop the Bitcoin Thieves

Liquid restricts bitcoin withdrawals to addresses tied to registered authorization keys, a control its own documentation says exists so nobody can redirect user funds to an attacker. Roughly 4,000 BTC reached an attacker's address anyway, and Galaxy's head of firmwide research says the restriction never applied to the people who took it.