B

Blockstream

Bitcoin infrastructure provider: networks, wallets, mining

Project Management Office

Full-TimeUpdated on 10/15/2026
No salary listed
Mid
Lugano, Switzerland
In Person
Project & Program ManagementProject Management

About the job

Requirements
  • 2–4 years of experience in project coordination, PMO support, or project administration.
  • Experience supporting technical or enterprise projects, preferably in financial services, fintech, or technology environments.
  • Proficiency with project management tools such as Jira, Asana, Monday.com, MS Project, or similar platforms.
  • Understanding of project management principles and best practices.
  • Ability to work collaboratively across multiple teams and geographies and provide high-quality, high-touch customer engagement throughout all phases of delivery.
  • Swiss German, German, and English language proficiency is required.
Responsibilities
  • Support Project Managers with project administration, documentation, and coordination activities.
  • Maintain project management tools, trackers, and dashboards to ensure accurate status visibility.
  • Prepare and distribute project status reports, meeting agendas, and minutes.
  • Schedule and coordinate project meetings, workshops, and stakeholder engagements.
  • Track project actions, decisions, risks, and issues, ensuring timely follow-up and closure.
  • Maintain project documentation repositories, ensuring files are organized, current, and accessible.
  • Assist with onboarding new project team members and stakeholders to project processes and tools.
  • Collect and consolidate project data for reporting to internal leadership and client stakeholders.
  • Support budget tracking and resource allocation activities.
  • Ensure compliance with project management standards, templates, and governance frameworks.
  • Contribute to the improvement of PMO processes, templates, and tooling.
Desired Qualifications
  • Exposure to blockchain, digital asset, or crypto infrastructure projects.
  • Familiarity with financial services operations, banking systems, or regulated environments.
  • Experience with agile or hybrid delivery methodologies.
  • CAPM, PSM, or similar project management certifications.
  • French and/or Italian language proficiency.
  • Interest in progressing into Project Manager roles.

About the company

Blockstream provides infrastructure for Bitcoin and digital assets, including the Liquid Network, Core Lightning, wallets (Green and Jade), Blockstream Satellite, and mining services. Liquid is a sidechain that enables faster, more private settlements; Core Lightning is a scalable Lightning Network implementation for quick Bitcoin payments; wallets store Bitcoin and Liquid assets; Satellite broadcasts the blockchain from space to give global access; Mining services offer investment exposure via Blockstream Mining Notes. It differentiates itself by offering multiple interconnected infrastructure products in one place, plus notable partnerships like solar-powered mining facilities, serving both retail and institutional clients. Its goal is to improve the security, scalability, and reach of the Bitcoin and digital asset ecosystem with practical, interoperable tools for users, traders, miners, and developers.

Company Size

51-200

Company Stage

N/A

Total Funding

$637.1M

Headquarters

Menlo Park, California

Founded

2014

Get referred to Blockstream

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Blockstream patched Liquid quickly, shipping Elements v23.3.4 within days after September 6.
  • Blockstream raised $125 million in August 2026 for institutional mining expansion.
  • The company’s $210 million late-2024 round still funds products, Bitcoin purchases, and growth.

What critics are saying

  • September 6, 2026 Liquid exploit drained roughly 4,000 BTC and halted peg-outs.
  • River Financial sued Blockstream Services Canada ULC on September 11, 2026 for $6.7 million.
  • A persistent 602-BTC Liquid shortfall threatens confidence and creates an existential trust risk.

What makes Blockstream unique

  • Liquid remains a unique Bitcoin settlement rail; Blockstream controls its infrastructure and recovery.
  • Jade Core, launched April 28, 2026, deepens Blockstream’s self-custody hardware moat.
  • Elements-based technology still powers Liquid, giving Blockstream a rare Bitcoin protocol stack.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

Dental Insurance

Vision Insurance

Flexible Work Hours

Remote Work Options

Stock Options

401(k) Retirement Plan

Performance Bonus

Growth & Insights and Company News

Headcount

6 month growth

1%

1 year growth

0%

2 year growth

-4%
The Currency Analytics
Sep 28th, 2026
River Financial's $6.7 million lawsuit sparks confusion over Blockstream brand split.

River Financial's $6.7 million lawsuit sparks confusion over Blockstream brand split. Verified 40 votes Updated 7 hours ago River Financial went to court on September 11. The target: Blockstream Services Canada ULC, named in a $6.7 million lawsuit tied to a canceled contract. And almost immediately, the wrong company started taking heat for it. Blockstream Corporation - a separate entity - came out Saturday to say it has nothing to do with the case. It hasn't owned or managed any services firms in the U.S. or Canada since mid-2024. The problem is that the shared "Blockstream" branding meant headlines on X were pointing fingers at the wrong outfit. That kind of confusion moves fast on social media, and it clearly pushed Blockstream Corporation to get in front of the story before things got worse. Two companies, one brand name. The corporate split here is actually pretty important to understand. Blockstream Corporation says it divested its interests in the North American services businesses over two years ago - meaning well before River Financial ever filed its complaint. Blockstream Services Canada ULC, the actual defendant, operates independently. It's not under Blockstream Corporation's control, and hasn't been for a while now. Choose POS Systems But that distinction basically didn't exist in the first wave of coverage. Posts circulating on X framed the lawsuit as something Blockstream Corporation was facing directly. It wasn't. And the fact that the two entities share a name made it easy for the story to spiral in the wrong direction. Blockstream Corporation's statement on Saturday was a direct attempt to stop that. The company was clear: it no longer owns or manages these firms, the lawsuit doesn't involve it, and the headlines were wrong. No ambiguity there. What River Financial is actually claiming. River Financial's complaint is focused on contract termination. The company says it suffered $6.7 million in damages because a deal with Blockstream Services Canada ULC fell apart. That's the core of it. What the contract covered, why it was canceled, who pulled out first - none of that has been spelled out publicly yet. The court filings don't seem to have surfaced those details, and neither River Financial nor Blockstream Services Canada ULC has offered much beyond what's already in the legal complaint. Trade Crypto Assets Discover more Compare Exchange Rates Open Trading Account It's a big number. $6.7 million isn't a minor contractual dispute. And in the crypto industry, where business relationships between companies can be layered and opaque, a claim this size draws attention fast - especially when the defendant carries a recognizable brand name. River Financial, for its part, hasn't responded to Blockstream Corporation's clarification. No comment, no pushback, nothing. Unclear whether that's a legal strategy or just silence. Either way, the public record stays thin. Brand confusion as a real business risk. The crypto sector has a long history of tangled corporate structures. Companies spin off subsidiaries, license brand names, rebrand after acquisitions, or operate multiple entities under similar names across different jurisdictions. It's not unusual. But it creates a real problem when lawsuits land and the public - or even reporters - can't immediately tell which company is actually on the hook. Discover more Deploy Cloud Servers Compare Exchange Rates Blockstream Corporation's situation probably won't be the last time something like this plays out. And the speed at which wrong information spreads on platforms like X makes it harder to contain. By the time a clarification goes out, the original framing has already done some damage. The brand integrity question is real. If Blockstream Corporation divested those North American services businesses in mid-2024, it presumably knew there was some residual risk of confusion down the road. Whether it did enough to publicly signal that separation before the lawsuit hit is a fair question - one the company probably didn't want to be answering on a Saturday. For now, the case moves through the legal system. Blockstream Services Canada ULC is the defendant. River Financial wants $6.7 million. And Blockstream Corporation wants everyone to know it's not in the room. No timeline has been given for the next steps in the litigation. No additional disclosures have come from either side. The contract at the center of this dispute - whatever it covered - remains basically a black box. Further court filings will probably be the only way to get a clearer picture of what actually went wrong between River Financial and Blockstream Services Canada ULC, and whether $6.7 million is a number either side is willing to negotiate down before this goes further. Frequently asked questions. Who is River Financial suing and for how much? Is Blockstream Corporation involved in the River Financial lawsuit? Why it matters. This lawsuit highlights the complexities and potential legal pitfalls in the crypto industry, particularly concerning branding and corporate structure. As companies in this sector often operate under similar names, misunderstandings can lead to reputational damage and financial consequences, emphasizing the need for clear differentiation and communication within the market. Such legal disputes may also affect investor confidence and operational partnerships, which are crucial for the growth and stability of crypto firms. Community Trust Index High Confidence Real Take Economics Courses 85% 15%Fake 40 community signals Post Views: 18

Negative Public Relations
Sep 28th, 2026
Blockstream under siege: Liquid Network hack, $6.7M River lawsuit, and fraud allegations collide.

Blockstream under siege: Liquid Network hack, $6.7M River lawsuit, and fraud allegations collide. A cascading crisis at Blockstream - a $6.7 million lawsuit from River Financial, a nearly 4,000 BTC Liquid Network exploit, and unresolved fraud allegations tied to its Mining Notes - has put the Bitcoin infrastructure firm's reputation under intense scrutiny. 2026-09-28 Subject: Blockstream/Liquid Network Disclaimer: The information in this article was published by third parties and is aggregated here for research and commentary. All claims are attributed to their original sources. This is not legal advice. Blockstream, once regarded as one of Bitcoin's most technically credible infrastructure companies, is now facing a pile-up of reputational crises that few firms in the crypto space could survive unscathed. In the span of a few months, the company has been hit with a multimillion-dollar lawsuit, a major security breach on its flagship Liquid Network sidechain, and lingering fraud allegations tied to its mining products - each compounding public doubt about the other. Lawsuits & litigation: the $6.7 million River Financial suit. The most recent and arguably most damaging development is a lawsuit filed by River Financial against Blockstream Services Canada ULC on September 11, 2026, seeking roughly $6.7 million. According to Bitcoin.com News, Blockstream Corp has attempted to distance itself from the suit, claiming the services entity "left its control" in mid-2024. But that explanation has done little to quiet community confusion - the shared branding and licensing arrangement between Blockstream Corp and the Canadian services entity has made it nearly impossible for outside observers, partners, and customers to tell where liability actually begins and ends. When a company's own corporate structure becomes the subject of the controversy, it signals a deeper governance and communications failure - precisely the kind of scenario that calls for coordinated crisis reputation management rather than after-the-fact clarification posts. Cyber incident: the Liquid Network exploit. Compounding the litigation is a major security incident on the Liquid Network, Blockstream's Bitcoin sidechain used by institutional traders and exchanges. Nearly 4,000 BTC was siphoned from the network in an exploit that forced Blockstream to publish a technical security assessment on September 6, 2026, detailing corrective measures, per Bitcoin.com News. Users reported delays in restoring L-BTC to BTC peg-outs - a technical failure that, for an infrastructure provider whose entire value proposition is trust and reliability, is close to an existential threat. The aftermath got stranger still. According to Pluang, the attackers returned 3,400 BTC but retained 598.5 BTC, effectively attempting to extract a ransom while framing themselves as white-hat actors. Blockstream refused to pay, publicly rejecting the Sources. Disclaimer: The information presented in this article was published by third parties and is aggregated here for research and commentary purposes only. NegativePublicRelations.com does not claim these allegations as fact; all claims are attributed to their original publishers, linked above. Readers are encouraged to review the original sources. This post is not legal advice. "A cascading crisis at Blockstream - a $6.7 million lawsuit from River Financial, a nearly 4,000 BTC Liquid Network exploit, and unresolved fraud allegations tied to its Mining Notes - has put the Bitcoin infrastructure firm's reputation under intense scrutiny." - NegativePublicRelations.com Original source This post is based on reporting by Bitcoin.com News. NegativePublicRelations rewrite and analyze the story; the original article remains the property of its publisher. Facing a similar situation? Its reputation strategists can help. Reader feedback & talkbacks. Post anonymously - no registration required. Your name is optional. No feedback yet. Be the first to share your experience. Covert Dark PR Agency NegativePublicRelations is a Negative PR agency. Experts in hostile publicity, mass publishing of verified defamatory information, and damaging press directed at an individual or organization. Fully covert operations NegativePublicRelations provide aggressive Dark PR in a fully covert form: campaigns are commissioned and operated in secret, often through intermediaries, anonymous accounts, public-relations firms, or purportedly independent voices. The concealed sponsor may be a competitor, investor, litigant, activist group, or political actor. The target may never learn who initiated the campaign. Live Campaign Samples What a negative PR campaign actually looks like. These are real negative PR websites NegativePublicRelations created. In a single campaign NegativePublicRelations deploy hundreds of hostile news websites publishing thousands of articles and posts every day - all focused on the target - generating massive, coordinated negative online coverage that dominates search results, AI answers, and public perception. Each site above is a single node in a larger campaign. A full engagement scales this model across hundreds of domains - news sites, investigation archives, whistleblower portals, and sector-specific dossiers - each publishing continuously, all indexed by Google and cited by AI answer engines. The result is an inescapable wall of negative coverage that reshapes how the target is perceived online. Confidential briefing Ready to take back control of your reputation? Request a confidential briefing with its reputation strategists. NegativePublicRelations assess the threat, map the attack surface, and deploy a lawful, evidence-based defense across search, social, and AI answer engines. Strictly confidential · No obligation · Response within 24 hours

CryptoSlate
Sep 12th, 2026
Blockstream bets 600 Bitcoin by rejecting Liquid hacker's $50 million bounty demand.

Blockstream bets 600 Bitcoin by rejecting Liquid hacker's $50 million bounty demand. The fight over the remaining $46 million is splitting crypto over whether rewarding partial restitution encourages cooperation or invites extortion. Senior Reporter - CryptoSlate Sep. 12, 2026 Quick take. * 01 Blockstream rejected the Liquid attacker's demand for nearly 600 BTC after 3,400 BTC was returned following the September exploit. * 02 The dispute pits deterrence against restitution, as paying could reward attacks while refusing may reduce incentives for future hackers to cooperate. * 03 Liquid remains about 85% reserve-backed, with peg-ins and peg-outs disabled while Blockstream traces the remaining funds or fills the gap. Blockstream is refusing to pay the Liquid attacker nearly 600 Bitcoin (roughly $50 million), escalating a dispute over how the crypto industry should reward partial restitution. The standoff follows an unusual recovery from the Sept. 6 exploit, when a vulnerability allowed the attacker to create about 4,000 unbacked L-BTC and withdraw roughly 3,996 real BTC through SideSwap. The attacker returned 3,400 BTC after Blockstream patched affected nodes, then demanded a 10% bounty paid from Blockstream's own funds and warned that holders could otherwise bear a roughly 15% shortfall. On Sept. 11, Blockstream rejected the demand and said it would pursue the remaining funds through law enforcement, exchanges, service providers, and forensic specialists if they are not voluntarily returned. The decision has opened a broader argument over whether refusing to compensate an attacker who returned about 85% of the haul strengthens deterrence or gives the next hacker less reason to return anything. Blockstream's rare recovery turns into a fight over incentives. The return of 3,400 BTC shifted the fight from recovering stolen funds to defining what cooperation after an exploit is worth. Lorenzo Romagnoli, co-founder of USDT0, said Blockstream had already received an outcome that most hacked crypto protocols could only hope for. He argued that an attacker linked to North Korea or another committed criminal group would have little incentive to voluntarily send back hundreds of millions of dollars. Romagnoli said: "Blockstream is already in the 1% of the 1% of luckiest hacked protocols on the planet." He said Blockstream retains every right to identify and prosecute the attacker, but warned that refusing a substantial bounty could change future hackers' calculations. A grey-hat attacker weighing whether to return stolen funds may see little upside in cooperation if restitution brings the same pursuit as keeping the entire haul. That argument collides with Blockstream's concern that paying would create a different incentive: allowing an attacker to exploit open-source infrastructure, seize user assets and then establish the price for returning them. Blockstream said it would not establish a precedent in which developers of open-source software could be forced to pay a demand that "far exceeds their economic participation." It also rejected the attacker's white-hat characterization and urged the party to "return the Bitcoin." Samson Mow, a former Blockstream chief strategy officer and chief executive of Bitcoin company Jan3, also challenged the economics behind the attacker's demand. The attacker had criticized Blockstream for allegedly spending too little to protect roughly $5 billion in assets issued across Liquid. Mow said that figure combines L-BTC, Tether, and real-world assets that belong to different issuers and holders, making the network's total asset value an inappropriate basis for determining a bounty. "Bounty amounts cannot be calculated based on the network's overall total value. Regardless of how the rest is negotiated, all users' assets must be returned in full." The circumstances preceding the withdrawal have also complicated the attacker's white-hat claim. SideSwap said the party spent hours rehearsing the transaction pattern before creating the unbacked L-BTC, with 70 similar transactions preceding the successful mint. The wallet used to initiate the attack had received funding that traced through a cross-chain bridge to Tornado Cash. In view of this, SideSwap called the event a "deliberate and prepared attack," while adding that: "We stand with Blockstream. The bitcoin left the Liquid reserve through our peg-out service and we have given Blockstream everything we have to help trace and recover it. Our fee on it is already returned. Return the Bitcoin." The last 600 BTC may be more useful unspent. With the bounty rejected, the remaining 598.5 BTC can continue putting pressure on Liquid even if the coins never move. Bitcoin researcher Alex Waltz questioned whether the attacker genuinely expects to spend the coins. According to him, the wallet is closely watched, and moving the BTC through exchanges, custodians, or other identifiable services could provide investigators with additional leads. That creates another possible motive for keeping the funds. Waltz said the attacker effectively faced two choices after returning most of the haul: return everything and hope Blockstream provides a generous reward, or retain a portion that may be difficult to spend but can continue inflicting an economic cost on Liquid. "If the hackers are somewhat well off, and had a good reason to hate Blockstream/Liquid, it seems the only way they can 'monetize' this situation is to keep the 600 BTC." He also raised the possibility that investigators could eventually obtain clues from artificial intelligence services used by the attacker if models were accessed through identifiable API accounts, though no evidence has emerged publicly showing that such services were used. The economic pressure is already visible on Liquid. SideSwap said on Sept. 10 that 4,205 L-BTC remained in circulation while the federation reserve held 3,597 BTC, leaving about 85% reserve coverage after the returned bitcoin was added back. Liquid has resumed producing blocks and SideSwap markets have reopened, but peg-ins and peg-outs remain disabled while the federation completes its security review. Blockstream Chief Executive Adam Back said the L-BTC-to-BTC peg will ultimately be covered one-for-one and urged holders not to sell at a discount. Blockstream has yet to detail how it will finance the roughly 600-BTC gap if the attacker refuses to return the funds, or when it will resume full redemptions. Meanwhile, SideSwap has said it will keep its peg service offline until the federation introduces a new security architecture and will disclose the changes before reopening it. Blockstream's alternative path now depends on tracing the remaining BTC and identifying whoever controls it. Until either the coins return or the reserve hole is filled from elsewhere, Liquid's markets can trade again while its core promise of converting L-BTC back into Bitcoin remains suspended. Market Signal Bullish 68 / 100 $77,355.57 0.46% 1H 0.05% 24H 0.46% 7D 2.83% 30D 21.67% 60D 23.24% 90D 19.87% Market cap $1.55T Volume (24h) $30.86B 4.45% Circ. supply 20.08M FDV $1.62T

OneSafe
Sep 12th, 2026
Blockstream takes a stand against ransom for stolen bitcoin.

Blockstream takes a stand against ransom for stolen bitcoin. What if the very foundation of your investment was under siege? This question resonates loudly following Blockstream's striking decision to reject a ransom for nearly 600 BTC stolen from its Liquid Network. This incident serves as a glaring reminder of the security vulnerabilities lurking within the cryptocurrency realm, particularly for investors and exchanges in Southeast Asia. As discussions about operational integrity and transparency within decentralized finance (DeFi) grow louder, Blockstream's stance against capitulating to ransom demands ignites crucial discourse about the responsibilities that come with cryptocurrency stewardship. The Liquid Network breach explained. On September 6, 2026, a sophisticated breach struck Blockstream's Liquid Network when hackers discovered and exploited a serious flaw in its transaction-validation software. The immediate repercussions were staggering; around 4,000 BTC were siphoned from the federation wallet in a heartbeat, halting operations and disrupting liquidity for a multitude of dependent users. While negotiations led to the recovery of around 3,400 BTC, the lingering absence of 600 BTC underscores serious questions regarding the trustworthiness of involved parties and the operational future of the Liquid Network itself. Blockstream's defiant position on ransom payments. In a powerful declaration released on September 11, Blockstream made its position clear, vehemently rejecting any negotiations over ransom. Their stance? "Taking assets without authorization and withholding their return is a crime, not responsible disclosure." This marks a pivotal shift - choosing a path of legal pathways over capitulating to criminal demands. By characterizing the theft in stark terms, Blockstream not only sets a new benchmark within the cryptocurrency landscape but also illuminates the murky waters of accountability in decentralized frameworks. The impact on Southeast Asia's growing crypto fabric. With over 700 million people in Southeast Asia engaging with cryptocurrencies, the implications of the Liquid Network debacle are momentous. The region has endured its share of phishing scams, leading to growing trepidation among traders. As Blockstream seeks legal avenues to recover its stolen funds, users and exchanges must tread cautiously. This incident serves as a sobering reminder of how security breaches can rattle market dynamics and invite additional scrutiny into the cryptocurrency ecosystem. Rethinking risk management in the DeFi sphere. Blockstream's firm refusal to comply with ransom requests is a clarion call to reassess risk management tactics regarding cryptocurrency theft and asset recovery. Historically, ransom payments were viewed as a quick fix for asset retrieval, yet they often pave the way for more lawlessness. Blockstream's stance inspires a shift towards transparency and accountability, laying the groundwork for vital discussions about forging stronger security protocols in cryptocurrency ventures, including decentralized autonomous organizations (DAOs). Legal action in the battle against crypto crime. Is it possible that collaborating with law enforcement could yield more favorable outcomes than bowing to ransom demands in the cryptocurrency underworld? Blockstream's approach suggests this might indeed be the case. Teaming up with law enforcement and blockchain forensic experts may not only provide pathways for asset recovery but also instill a stronger deterrent against future violations. By clearly delineating between theft and responsible disclosures, the crypto community can aspire to elevate security standards while nurturing trust in the management of digital assets. Moving forward: recovery strategies and new guidelines. The Liquid incident presents critical challenges regarding custody and the evolution of blockchain technology. Experts suggest that a collaborative, community-driven strategy could be pivotal for effective asset recovery. Engaging ethical hackers and blockchain analysis specialists may yield invaluable insights into tracing the disparate BTC and ultimately enhancing the decentralized financial landscape. As the Liquid Network gears up to resume operations, maintaining transparency with regular updates will be crucial, especially concerning the status of the missing funds. Conclusion. Blockstream's resolute refusal to entertain ransom demands could fundamentally alter the cryptocurrency narrative, potentially recalibrating expectations for how incidents are managed. As DeFi continues to navigate uncharted waters, the focus must transition from merely reacting to crises to implementing proactive legal frameworks and fostering communal responsibility. Stakeholders across Southeast Asia and the globe must stay alert, aware of emerging threats while advocating for fortified security practices. In the fast-paced arena of cryptocurrency, the enduring impact of Blockstream's bold stance may not only shape future security protocols but also redefine the very essence of asset recovery. This is a critical juncture, rich with lessons to be learned and obstacles still to overcome. The story unfolds, and its influence on cryptocurrency security and norms is a narrative we all must watch closely. Article by Last updated September 12, 2026 Get started with Crypto in minutes! Get started with Crypto effortlessly. OneSafe brings together your crypto and banking needs in one simple, powerful platform.

Crypto World
Sep 11th, 2026
Crypto hack: Blockstream rejects ransom as nearly 600 Bitcoin remains missing.

Crypto hack: Blockstream rejects ransom as nearly 600 Bitcoin remains missing. CryptoWorld September 11, 2026 Crypto News 3 minutes read Blockstream has refused to pay for the return of Bitcoin after a theft from the Liquid Network because it believes that security researchers should not steal! Most of the funds have already been returned, but nearly 600 BTC, which is worth about $47 million, remains with the people behind the attack. How the Liquid Network hack unfolded. The incident began when attackers found a flaw in software used by Liquid, a Bitcoin-based network designed to support faster transfers and other financial services. Through the weakness, around 4,000 Liquid Bitcoins were generated, which were then exchanged for the real Bitcoin on the network. They [the attackers] described what they did as "white-hat" activity, and about 3,400 BTC was returned afterwards. But Blockstream said that the negotiation it had before with the people behind it was just to get users' funds back, and that it should not be interpreted as accepting their actions or demands. Blockstream draws a line over the remaining bitcoin. In a public statement, Blockstream declared that it would not be paying a ransom to recover the remaining funds. Taking assets without authorization and withholding their return is a crime, not responsible disclosure. It is not white-hat activity. It is theft. Blockstream said they were not going to pay, stating that paying would create a bad precedent for those who develop open-source software. Instead, it promised to aid law enforcement, exchanges, and BTC blockchain investigators to find the BTC that had not yet been seized and trace those responsible for the attacks. Blockstream ended the statement with a direct demand: "Return the bitcoin." Bitcoin community questions Blockstream's position. The refusal has divided some members of the Bitcoin community. Whale Coin Talk wondered if the situation could have been worse still and pointed out that the funds were returned, so it was an actual white hat, as another group might never have given them back. Seems like white-hat hackers are doing a better job than protocols at keeping users safe. Others focused on Blockstream's responsibility for the vulnerability. Kurt Wuckert Jr. summarized that criticism by writing: Code is law when it benefits CryptoWorld, but law is law when its code gets people robbed. All these do not answer the questions of whether the attackers are security researchers, and show why the case became more than a crypto hack. It also raises the issue of when unauthorized testing can be called extortion. Final summary. * Blockstream says it will not pay for the return of nearly 600 BTC still held by the attackers. * The partial return of approximately 3,400 BTC has caused disagreement over whether the incident involved white-hat research or theft.