Image Credit: threshold.network
- Threshold Network restarted its tBTC bridge on-chain following a 9-day security pause.
- The bridge app still blocks new Bitcoin deposits, minting, and redemption requests.
- Node operators are reconnecting on patched systems to restore full bridge operations.
Threshold Network’s tBTC bridge, which issues Bitcoin-backed tokens for use in DeFi, has restarted on-chain after a nine-day security pause. Its app still blocks new Bitcoin deposits, tBTC minting and Bitcoin redemption requests.
Aave’s restrictions also remain in place. Borrowers can repay debt or add other eligible collateral, but they cannot top up their positions with more tBTC.
Patched Operators Return, but the Bridge App Stays Closed
Threshold announced the restart late on Nov. 8 as independent node operators began reconnecting on patched systems. Those operators jointly authorize movements of the Bitcoin backing tBTC, so getting the network running depends on enough of them returning.
Many of the operators assigned to a bridge wallet must cooperate to sign its Bitcoin transactions. That prevents one operator from moving the funds alone but also means recovery requires sufficient participation across the signing group. The Threshold said:
“Node operators are reconnecting on patched systems, and the bridge will return to full operation as more of them come back online.”
The app is due to reopen once enough operators are available to process deposits, minting and redemptions promptly. Threshold plans another update when the interface is fully enabled.
The pause began on Oct. 30 during maintenance addressing a critical Linux kernel vulnerability. Red Hat says the flaw, tracked as CVE-2026-98432, could let a remote attacker execute code on an unpatched server without needing an account or user interaction.
Threshold said operators patched their servers or took them offline, and it found no evidence that the vulnerability had been exploited against a tBTC node.
Pending Requests Await Processing as Old Deposit Addresses Stay Off-Limits
Threshold says deposits and redemption requests submitted before the pause will be processed as operators reconnect. Its restart update does not identify any completed Bitcoin payouts.
Users have also been told not to send Bitcoin to deposit addresses generated before the shutdown or resubmit transactions already awaiting processing. Once the app reopens, they should begin a fresh deposit through the interface instead of reusing an old address.
Through the bridge, Bitcoin holders normally receive tBTC for use in lending and other blockchain applications, then redeem it to recover Bitcoin. Both directions remain closed to new requests.
Existing tBTC can still be held and transferred. Those token movements were not suspended with the bridge, so the restart concerns the machinery connecting tBTC to its Bitcoin backing.
Threshold says approximately 4,320 BTC remains in bridge wallets against roughly 4,185 tBTC in circulation, with no unauthorized Bitcoin movements or token minting detected.
The reserves can remain intact while a holder is still waiting for Bitcoin. Completing that payout requires the operators to authorize an actual Bitcoin transaction.
Aave Borrowers Can Repay but Cannot Top Up With tBTC
Aave froze the tBTC reserve on its Ethereum Core market on Oct. 31 following a recommendation from risk provider LlamaRisk. The aim was to prevent exposure from growing while bridge redemptions were unavailable.
A Nov. 9 snapshot of Aave’s interface valued the supplied tBTC at roughly $120 million. That is the value of tokens supplied to the lending market, not a reported loss or theft.
The freeze blocks new tBTC supply and additional borrowing against it. Repayments, withdrawals, and liquidations continue, while borrowing against other collateral remains available.
Existing liquidation thresholds were not changed by the freeze, so the restriction itself did not lower borrowers’ health factors or trigger liquidation. Market moves can still push a borrower toward liquidation. To strengthen a position, users can repay debt or supply another eligible collateral asset.
Withdrawing from Aave returns tBTC to the user’s wallet. Receiving Bitcoin from the bridge remains a separate operation, and the app is still closed to new redemption requests.
LlamaRisk said it would propose restorative measures once it had assurance that Threshold’s operations were back to normal. Reconnecting bridge operators therefore does not automatically reopen Aave’s reserve.
