UPDATE: The Liquid Network "white-hat" hacker has returned 3,400 BTC after Blockstream said its bridge nodes had been patched. Around 600 BTC remains in the attacker's wallet.