Threshold Pauses tBTC Minting and Redemptions During Security Response

Threshold Network paused tBTC minting and redemptions during a security response, saying its reserves remained sufficient for the token and that no Bitcoin (BTC) funds had been lost.

Threshold said its bridge wallets held about 4,320 BTC against roughly 4,185 tBTC in circulation. It also said it had found no unauthorized minting or Bitcoin transfers.

The response followed disclosure of Linux kernel flaw CVE-2026-98432, which may let an attacker remotely run code on unpatched servers. Threshold said it had found no evidence the flaw was used against tBTC nodes. Node operators had either patched their servers or taken their nodes offline while waiting for a fix.

Separately, a node operator disclosed an incident in its wider infrastructure that was unrelated to the kernel flaw. About 0.5 Ether (ETH) was taken from an Ethereum account used to pay fees for its tBTC node. The node was offline at the time, and the operator found no evidence that signing key material had been accessed.

Threshold said moving Bitcoin from its bridge wallets requires signatures from a majority of independent operators, so one operator cannot transfer the funds alone. It plans to reopen the bridge after security maintenance is complete and nodes are running patched systems. Threshold said it would provide another update within 24 hours, or sooner if conditions change.