Nearly 4,000 BTC walked out of Liquid's reserve on Sept. 6 through a withdrawal the network itself approved — no stolen keys involved. The software just accepted a request that never should've passed. That's the real lesson here: "not your keys, not your coins" is true, but it's not the whole story. A wrapped-token bridge can fail at the protocol level even when every private key is exactly where it's supposed to be.