Threshold Network’s tBTC bridge has partially resumed onchain operations after a nine-day security pause triggered by a critical Linux kernel vulnerability. During the halt, an associated Aave reserve holding approximately $120 million in tBTC was frozen to new deposits and borrowing.
The bridge is now restarting as security-patched node operators reconnect. However, Threshold stated that new deposits, minting, or redemptions will not be accepted until a sufficient number of nodes are online. The vulnerability could have allowed remote attackers to execute code on unpatched servers, though the project found no evidence of exploitation against tBTC nodes.
To mitigate risk during the outage, Aave froze its tBTC reserve on Ethereum Core on October 31. This restriction prevents new tBTC deposits and stops the token from adding borrowing power within the Aave protocol, while existing users can still withdraw and repay loans.
Threshold reported that approximately 4,320 BTC remains in bridge wallets against about 4,185 tBTC in circulation, confirming no unauthorized Bitcoin transfers or token minting were detected.
Aave risk provider LlamaRisk indicated it would propose restoring the reserve once Threshold’s operations normalize. The exact timeline for the full resumption of tBTC bridge functionality, including new deposits and redemptions, remains unannounced. The continued freezing of the Aave tBTC reserve highlights that operational normalization is not yet complete, impacting the bridge’s utility in the DeFi ecosystem.
Why This Matters
The materials describe a narrow update: Threshold Network’s tBTC bridge has partially resumed onchain operations after being halted for nine days due to a critical Linux kernel vulnerability. The exact restart date for full tBTC bridge functionality, including new deposits and redemptions, was not announced.
Broader Context
Source materials place the factual news in this context: Threshold halted its tBTC bridge on Oct. 30 as operators addressed a critical Linux kernel vulnerability that could allow attackers to execute code on unpatched servers.
Leave a Reply