Blockstream has sent a letter to the "white hat hacker": the vulnerability has been fixed, and funds can be safely returned.

BlockBeats News, September 7 — The "white hat hacker" who recently withdrew approximately 4,000 BTC from Liquid stated that they will return part of the stolen funds after the relevant vulnerability is fixed. The two parties had previously engaged in public negotiations through Bitcoin OP_RETURN messages, with the white hat hacker demanding that Blockstream first fix the vulnerability and ensure all nodes complete upgrades.

Earlier, the "white hat hacker" had communicated with Blockstream via OP_RETURN on-chain messages and PGP-encrypted information, indicating that they would return the "majority" of the approximately 4,000 BTC transferred once the Liquid network vulnerability was fully resolved.

About two hours ago, Blockstream responded via a PGP-signed OP_RETURN message, stating: "Bridge nodes have been patched, and funds can be safely returned." Currently, the hacker still controls approximately 3,998.5 BTC, and whether the funds will ultimately be returned remains to be seen.