Orange Surf pointed at something uncomfortable in his analysis.
The fix for the bug that drained Liquid had a commit dated the 3rd of August. The pull request carrying it was still open on the 1st of September.
Which means the patch was public while the hole it closed was still live on the network. Anyone reading that repo could see exactly what to look for.
If you are sitting on 4,000 Bitcoin of other people's money, an open pull request is a map for anyone who bothers to read it.
OrangeSurf (npub18h0…ws8m)
https://ungovernable.network/shows/bitcoin-brief/4000-bitcoin-hacked/
Ungovernable
npub1jc…n2890
2026-09-10 20:58:00 UTC
Author Public Key
npub1jcympy69pht7ptan39se4nd09e4q66qhey649uu3rczm2zh88c7s0n2890Seen on
wss://nos.lolPublished at
2026-09-10 20:58:00 UTCEvent JSON
{
"id": "0e39f25b3218d92e99bb9eb50de9d3f99b804c6122cea60417d7060a1f92d8ac",
"pubkey": "9609b093450dd7e0afb389619acdaf2e6a0d6817c93552f3911e05b50ae73e3d",
"created_at": 1789073880,
"kind": 1,
"tags": [],
"content": "Orange Surf pointed at something uncomfortable in his analysis.\n\nThe fix for the bug that drained Liquid had a commit dated the 3rd of August. The pull request carrying it was still open on the 1st of September.\n\nWhich means the patch was public while the hole it closed was still live on the network. Anyone reading that repo could see exactly what to look for.\n\nIf you are sitting on 4,000 Bitcoin of other people's money, an open pull request is a map for anyone who bothers to read it.\n\nnostr:npub18h0w55nsp839ezxnggf00jd2xc6yl0ht62mf5p8wwllu8s80wdcs83ws8m\n\nhttps://ungovernable.network/shows/bitcoin-brief/4000-bitcoin-hacked/\n\nhttps://video.nostr.build/eadd87914b5bbd75509ea72fcbd7c073635e1cc77c690f596584e9afe8bb5b7c.mp4",
"sig": "990216d2d54128f9b4c6418fe2ac166b3972b6f7793c67e0ffee11ac4b07a2b8cb11fffa1344a0112c167ff161c39d42251f7550ae8af233e8c158a95395db24"
}