This Week in Crypto (August 31–September 7): Liquid Loses 95% of Its Bitcoin to a Cache Bug, Twenty-One Banks Launch a Dollar, and the House Leaves Two Days After Crypto's Big Vote

The largest crypto theft this week involved no stolen key. Blockstream's Liquid sidechain lost about 95% of its bitcoin on Saturday because a caching shortcut let someone mint coins that were never there, and the federation signed the withdrawal correctly. Elsewhere: twenty-one of the world's largest banks committed to issuing their own dollar, the House cancelled the two voting weeks behind crypto's big Senate vote, and ETFs took $3.8 billion over three weeks while markets priced a two-in-three chance of a rate hike. Here's the week, story by story.

The week at a glance

Liquid lost 95% of its bitcoin, and every signature on the way out was valid

On September 6, about 4,000 BTC — roughly $320 million — left the Liquid Federation wallet, some 95% of all bitcoin pegged into Blockstream's sidechain. Under 210 BTC remain.

No private key was compromised. Liquid's 15-member federation needs 11 signatures to release bitcoin, and it produced them, because from where it sat the peg-out looked ordinary. The failure was upstream, in Elements, the software Liquid runs on: a rangeproof cache whose key omitted asset and script context, letting an already-verified proof validate a fresh, unbacked issuance. Someone minted L-BTC that did not exist and redeemed it for bitcoin that did. The fix had been merged into Elements but never shipped in a tagged build.

On X: @Liquid_BTC — Blockstream confirms the withdrawal, disables bridge nodes, and says USDT, DePix and RWAs are unaffected.

On X: @Rob1Ham — the first public flag, quoting the attacker's OP_RETURN: "we are whitehats. contact us on chain."

SideSwap, whose Peg-out Authorization Key routed the request, said "no SideSwap system or PAK was breached" and could not tell the coins from ordinary L-BTC. The recipients later offered to return "most" of it if Blockstream patched first, then asked to talk on Signal — a sequence Ledger CTO Charles Guillemet refused to call white-hat work. As of September 7 nothing had moved and L-BTC holders still cannot redeem. That is the standing lesson in why cross-chain bridges keep getting hacked: a peg is only as sound as the accounting behind it.

The CLARITY vote survived the week; the calendar around it didn't

The Senate's cloture vote on the Digital Asset Market Clarity Act is still set for September 15, needing 60 votes; Republicans hold 53 seats, so at least seven Democrats have to cross. What changed happened in the other chamber. House leadership cancelled the voting weeks of September 21 and 28, cutting eight legislative days, so the House sits September 14–17 and then leaves until after the midterms.

That ordering is the problem. The Senate votes on the 15th; the House is gone by the 17th. Any bill the Senate amends needs House action the calendar no longer provides, pushing CLARITY into a lame duck where one or both chambers may have changed hands.

On X: @BrendanPedersen — "This change means the House would be gone by Sept 17, and the Clarity Act may not get a vote until lame duck."

Three provisions remain unresolved: ethics rules for officials profiting from crypto, developer liability under Section 604, and whether stablecoins can pay anything like interest. Galaxy Research cut its 2026 passage odds to 30% from 50%; Polymarket traded near 17–18%. If cloture fails, the bill dies for the year and regulation reverts to agency rulemaking a future administration can undo.

Twenty-one banks decided to issue the dollar rather than integrate one

On September 1, twenty-one financial institutions — Bank of America, Citi, Goldman Sachs, Wells Fargo, Deutsche Bank, UBS, Santander, MUFG and Standard Bank among them, across five regions — committed to forming a company in the second half of 2026 to issue a US dollar stablecoin, targeting launch in the first half of 2027. A euro version is the named next priority.

On X: @ReutersLegal — the group "plan to create a company this year to issue a cryptocurrency pegged to the dollar in the first half of 2027."

The design is conventional — a 1:1 reserve-backed token on public blockchains for payments and settlement. What's notable is everything still blank: no company name, no token name, no chains, no reserve custodian, no redemption terms. The OCC targets final stablecoin rules for November 2026, so this is a product designed while its rulebook is still being written, the same sequencing problem the GENIUS Act created for everyone already issuing.

It is the second such consortium this year, after Open USD arrived on June 30 backed by 140-plus members including Stripe, Visa and BlackRock. Same conclusion twice: the incumbents would rather mint than integrate. For anyone holding dollar-denominated tokens, the question moves from "is it backed" to "whose balance sheet, under which regulator."

ETFs bought the dip that rate expectations were creating

US spot bitcoin ETFs took $730.89 million on September 3, their third-largest session of 2026, with BlackRock's IBIT alone at $453.96 million and Ark's ARKB adding $137.74 million. Ether funds took $141 million the same day. The week drew $986.9 million, for $3.8 billion across three weeks.

On X: @thepfund — "9/3 Bitcoin ETF Total Net Flow: +$730.89m. The 3rd highest inflow in 2026."

The macro ran the other way. Odds of a 25 basis-point hike at the September 15–16 FOMC sat at 66–68%, up from roughly 35% before Chair Kevin Warsh's Jackson Hole remarks, and a stronger-than-expected September 5 jobs report knocked 1.3% off the market in a day. Bitcoin opened the month at $78,559, peaked above $81,000, and settled near $79,910 by the 6th — still far below its $126,080 high.

Institutional flows and rate expectations are pointing in opposite directions. One of them is early.

Also this week

• The SEC reopened its transfer-agent rulebook for the first time in roughly 40 years. The September 1 proposal covers the ~273 agents who keep issuers' official ownership records and asks how those records should work on a blockchain. Comments run 60 days from Federal Register publication.
• Zcash cleared $1,000 on September 4 for the first time in nearly a decade, then reached about $1,200 by the 6th — roughly 370% in three months. Grayscale's ZCSH, the first US-listed spot ETP for a privacy coin, passed $414 million in assets within ten days of its August 25 listing.
• A Solana AMM offered its attacker a finder's fee and got silence. Aquifer lost about $2.5 million on August 31 and offered to let the attacker keep 20% if 80% came back by September 3. The deadline passed with nothing confirmed returned.
• Solana had a busy week off the price chart. A five-stage rent reduction began August 31, targeting a 90% cut in storage costs, with Transaction V1 due September 9. SOL and XRP funds both entered September near $1.5 billion — the first non-bitcoin, non-ether products at that size.

What to watch next

September 15 carries two events at once: CLARITY cloture, and day one of the FOMC that markets give a two-in-three chance of hiking. The House leaves on the 17th either way. Solana's Transaction V1 ships September 9, and the OCC's final stablecoin rules are targeted for November. Two incidents stay open: Blockstream has not said when Liquid reopens or whether the ~4,000 BTC comes back, and Aquifer still owes a post-mortem. Both argue for knowing what your wallet is actually approved to do — Wallet Approval in our documentation walks through auditing that. The ETF and SEC threads from last week's roundup both continued — one up, one sideways.

Last updated: September 2026

Word count: 1,202 words (body only)