About 3,400 BTC was returned after the Sept. 6 exploit, but Liquid still requires full one-to-one backing, testing and security reviews before restoring peg-outs.