SKN | tBTC Bridge Partially Resumes After Security Shutdown as $120 Million Aave Reserve Remains Frozen

Key Points

• Bridge Operations Restarting: Threshold Network’s tBTC bridge began partially resuming operations on November 8 after a nine-day security shutdown to address a critical Linux kernel vulnerability.

• $120 Million Aave Reserve Restricted: Aave continues to block new tBTC deposits and borrowing against the token on its Ethereum Core market, although existing users can still withdraw and repay loans.

• No Unauthorized Transfers Detected: Threshold reported approximately 4,320 BTC held in bridge wallets against 4,185 tBTC in circulation, with no evidence of unauthorized Bitcoin transfers or token minting.

Threshold Restarts tBTC Bridge Following Security Pause

Threshold Network’s tBTC bridge has begun resuming onchain operations following a nine-day security suspension, although the recovery remains incomplete as participating node operators gradually reconnect. The development comes as approximately $120 million in tBTC reserves on Aave remain subject to restrictions, highlighting the broader implications of infrastructure disruptions across decentralized finance (DeFi).

The bridge was initially suspended on October 30 while operators addressed a critical Linux kernel vulnerability that could potentially allow attackers to execute malicious code remotely on unpatched servers. Although Threshold reported no evidence that the vulnerability had been exploited against its tBTC infrastructure, the precautionary shutdown temporarily disrupted Bitcoin transfers through the protocol.

On November 8, Threshold announced that security-patched node operators were reconnecting and that the underlying network was beginning to restart.

Bridge Recovery Depends on Node Operator Participation

The tBTC bridge relies on independent operators who collectively authorize Bitcoin movements and process deposits and redemptions. Their participation is essential to maintaining the connection between Bitcoin and the Ethereum-based representation of the asset.

As operators return online, previously submitted requests are expected to be processed progressively. However, Threshold has not yet restored the bridge’s full functionality.

The application remains unable to accept new deposits, mint additional tBTC or process redemptions until a sufficient number of operators have reconnected.

This distinction is important for holders and market participants. Although the underlying network has started recovering, the partial restart does not mean that all bridge services are available or that normal transaction processing has resumed.

Threshold has not announced a definitive date for restoring full operations.

Aave Maintains Restrictions on Its $120 Million tBTC Reserve

The disruption also affected Aave, one of the largest decentralized lending protocols.

On October 31, Aave froze its tBTC reserve on the Ethereum Core market to prevent additional exposure while redemptions through the Threshold bridge remained unavailable.

The restrictions prevent users from depositing additional tBTC or using the token to increase their borrowing capacity. However, existing users retain the ability to withdraw their assets and repay outstanding loans.

The decision reflects the interconnected nature of DeFi infrastructure, where the availability of an underlying asset can directly influence lending markets and collateral management.

When a wrapped or bridged asset becomes temporarily difficult to redeem for its underlying cryptocurrency, lending protocols may face additional liquidity and collateral risks.

Aave’s decision therefore prioritizes limiting further exposure while the bridge operator completes its security recovery process.

Bitcoin Reserves Remain Above Circulating tBTC Supply

Despite the operational disruption, Threshold reported that approximately 4,320 BTC remained in its bridge wallets, compared with approximately 4,185 tBTC in circulation.

This represents an underlying Bitcoin reserve exceeding the circulating token supply by approximately 135 BTC.

The project also reported no unauthorized Bitcoin transfers or unexpected token minting during the security incident.

These figures provide an important reference point for evaluating the bridge’s reported asset backing. However, reserve balances alone do not establish that redemption services are fully operational, particularly while node operators continue restoring the network.

Aave risk provider LlamaRisk indicated that it would propose restoring the tBTC reserve once Threshold’s operations return to normal.

Outlook: Security Recovery and Liquidity Restoration Remain Priorities

The partial resumption of the tBTC bridge represents progress toward restoring Bitcoin transfer functionality, but the continued restrictions on Aave demonstrate that operational recovery and market confidence do not necessarily move at the same pace.

The immediate priority remains reconnecting enough security-patched operators to restore deposits, minting and redemptions. Following that process, Aave’s decision to reopen its reserve will depend on the assessment of operational stability and the associated risks.

The incident also highlights a broader challenge for DeFi: interconnected protocols can experience financial and operational consequences when a single infrastructure component becomes unavailable.

For investors and users, the key developments to monitor are the restoration of normal bridge functionality, confirmation of redemption availability and the eventual removal of Aave’s restrictions. These milestones will help determine how quickly tBTC returns to normal activity across decentralized financial markets.