Liquid restricts bitcoin withdrawals to addresses tied to registered authorization keys, a control its own documentation says exists so nobody can redirect user funds to an attacker. Roughly 4,000 BTC reached an attacker’s address anyway, and Galaxy’s head of firmwide…