Following the recent Liquid Network incident, impersonators are active. They are posing as Liquid, as Blockstream, and as support staff, and urging users to take urgent action.
Do not.
As Liquid's technical provider, Blockstream is stating this plainly: this incident does not require you to move funds, enter a recovery phrase, update a "portfolio," check a reimbursement, re-peg assets, or install software sent by email.
Blockstream will never ask for your recovery phrase or PIN, or ask you to send funds anywhere.
What these messages look like
They arrive from many different email addresses, on websites that copy Liquid or Blockstream branding, and via DMs. Typical lures include:
- A "mandatory security update" or "security update portal" that asks you to update your portfolio, check a reimbursement, or download an installer
- A site that tells you to claim, refund, or re-peg L-BTC
- An email that claims to contain firmware, an app update, or an emergency wallet tool
- A support account that reaches out first and asks you to move coins to a "recovery" address
- A supposed white-hat, bounty, or on-chain contact asking you to coordinate off official channels
- A lookalike domain one letter off from an official Blockstream or Liquid site
If a message asks you to click, install, or enter a seed, it is not from us.
Do not
- Send funds to a "recovery" address
- Enter your seed into any "migration" site, form, checker, or tool
- Install firmware, an .exe, or any other software attached to or linked from an email
- Click links in unsolicited messages, even when they carry our name or logo
- Reply to unsolicited DMs
Where updates actually come from
Never update software from an email. Update only from blockstream.com or the official Blockstream app on the Apple App Store and Google Play. Jade firmware is installed through the official Blockstream app or the official firmware pages on blockstream.com, never from an attachment or a link in a message.
Official channels
- Web: blockstream.com, blog.blockstream.com, help.blockstream.com, status.blockstream.com
- Security reports: security@blockstream.com
- X: @Blockstream, @BlockstreamHelp, @BlockstreamJade, @Liquid_BTC
Support is provided only through help.blockstream.com.
If you receive a message claiming to be from Liquid or Blockstream that asks you to act, ignore it. Do not click the links. Delete it.