Source published: November 9, 2026, at 12:03:08 UTC+08:00.
Threshold Network’s tBTC bridge resumed onchain operations after a nine-day security pause, but the restart did not mean full access had returned. Its app remained closed to new deposits, minting and redemptions, while an Aave reserve holding about $120 million in tBTC was still frozen to new deposits and additional borrowing exposure.
What had restarted—and what had not
Threshold said on Sunday that the bridge’s underlying network was restarting as independent node operators reconnected after applying security patches. Those operators collectively authorize Bitcoin movements and process deposits and redemptions.
Requests submitted before the shutdown were expected to be processed as more operators returned. However, the app would not accept new requests until enough nodes were online. Threshold did not announce a date for reopening those functions.
That distinction matters for users: resuming onchain operations was not the same as restoring the bridge’s full deposit and redemption service.
Why the bridge paused
Threshold halted the bridge on October 30 while operators addressed a critical Linux kernel vulnerability that could allow remote attackers to execute code on unpatched servers.
The project said it found no evidence that the vulnerability had been exploited against tBTC nodes. It also reported roughly 4,320 BTC in bridge wallets against about 4,185 tBTC in circulation, with no unauthorized Bitcoin transfers or token minting detected.
These were Threshold’s reported findings, rather than an independently established security assessment in the supplied report.
What the Aave freeze meant
Aave froze its tBTC reserve on Ethereum Core on October 31 to prevent additional exposure while bridge redemptions were unavailable.
The restriction blocked new tBTC deposits and prevented the token from adding borrowing power. Existing users could still withdraw and repay loans.
Aave risk provider LlamaRisk said it would propose restoring the reserve once Threshold’s operations returned to normal. At the time of the report, that remained a proposed next step—not a completed reopening.