Threshold’s tBTC Bridge Restarts Following Critical Security Patch
After nine days offline due to a critical Linux kernel vulnerability, Threshold's tBTC bridge has begun restarting operations, though an Aave reserve holding $120M in tBTC remains frozen pending full operational recovery.
Threshold’s tBTC Bridge Restarts Operations Following Critical Security Patch
After nine days offline, Threshold Network’s tBTC bridge has begun restarting onchain operations following remediation of a critical Linux kernel vulnerability. The bridge, which enables Bitcoin to be wrapped into ERC-20 tokens for use on Ethereum, represents a significant conduit for bringing institutional-grade Bitcoin liquidity into decentralized finance protocols. While the restart commenced on Sunday, the bridge remains in a restricted operational mode as the network of independent node operators reconnects with security patches applied.
Security Incident & Response
Threshold halted its tBTC bridge on October 30 after identifying a critical vulnerability in the Linux kernel that could theoretically permit remote code execution on servers running unpatched versions. Such a vulnerability posed a systemic risk to the protocol’s security model, which depends on geographically distributed node operators to collectively authorize Bitcoin movements and process user deposits and redemptions. In response, Threshold took the proactive step of pausing bridge functionality to ensure operators could patch their infrastructure before resuming normal activity. Investigation revealed no evidence the vulnerability had been exploited against any tBTC nodes, meaning no funds were compromised during the window when the flaw existed.
Limited Restart, Aave Remains Cautious
Rather than a full reboot, the tBTC bridge is restarting incrementally. Users can expect the network to process redemption and deposit requests queued prior to the October 30 halt. However, the bridge will reject fresh deposit and minting requests until a sufficient threshold of node operators return to full capacity. Aave maintains its October 31 freeze on its tBTC reserve, currently holding approximately $120 million in the wrapped asset. This freeze restricts new deposits and prevents tBTC from providing additional borrowing capacity, though depositors retain the ability to withdraw funds and repay loans. Aave risk provider LlamaRisk intends to propose unfreezing the reserve once Threshold confirms normal operations have resumed.
Bridge Health & Market Implications
Threshold disclosed that roughly 4,320 Bitcoin sits in bridge wallets against approximately 4,185 tBTC in circulation, with no unauthorized fund transfers or irregular token minting detected. The network’s careful, operator-by-operator restart reflects the critical role tBTC plays in bridging Bitcoin into Ethereum’s DeFi ecosystem. For the broader crypto market, this incident highlights both the technical sophistication required to secure cross-chain protocols and the market’s appetite for institutional Bitcoin exposure through DeFi channels.
The tBTC bridge’s security pause and gradual recovery underscore the tradeoff between uptime and safety—a lesson increasingly important as Bitcoin integrations deepen across blockchain infrastructure.
Source: Threshold, via Cointelegraph. Not financial advice.