According to CoinMeta, in the Liquid vulnerability exploitation incident, the white-hat hacker group demanded that Blockstream pay 10% of the $5 billion in assets as a bounty for the vulnerability; otherwise, it would result in a 15% loss for the holders. The group accused Blockstream of only spending $1.5 million to provide security for $5 billion in assets and claimed that they would disclose the private keys used to decrypt the conversation content. The group has already returned 3,400 BTC to Liquid Federation, with about 600 BTC still not returned.