Boltz Halts Bitcoin Swap Service as AI-Assisted Bug Hunting Outpaces Its Team

Boltz Halts Bitcoin Swap Service as AI-Assisted Bug Hunting Outpaces Its Team

N
News Editor
2026-08-04 22:46:03
Boltz, a non-custodial Bitcoin swap service, has suspended swaps indefinitely after saying automated, AI-assisted attacks were escalating faster than its team could identify and patch vulnerabilities. In posts published Monday on X, the company said the shutdown was not tied to a single incident but followed months of probing against its infrastructure and several exploits that were contained. The pace picked up over the past few days, leading Boltz to decide it could no longer operate safely. The company said user funds were never at risk because customers retain control of their assets when moving Bitcoin between the Lightning Network and Bitcoin’s base layer. Boltz added that its API remains available for cooperative refunds, unilateral refunds still work because they do not rely on Boltz infrastructure, and customer support remains online. DeFiLlama lists roughly $262,000 in total value locked on the service, while Boltz has not disclosed transaction volume. Boltz framed the attacks as part of a larger shift affecting Bitcoin services built on open-source stacks. The announcement landed as the crypto sector was already debating AI’s role in cyberattacks. On Tuesday, Ledger CTO Charles Guillemet said AI lets attackers scan code and discover flaws at “machine speed,” as fallout from the Coldcard exploit continued and losses approached $130 million.

Boltz has suspended its Bitcoin swap service indefinitely, saying a rise in automated, AI-assisted attacks has made it unsafe to keep operating.

Boltz Halts Bitcoin Swap Service as AI-Assisted Bug Hunting Outpaces Its Team 2

In a series of X posts on Monday, the non-custodial service said swaps are unavailable "until further notice" and that it has no estimate for when they will return. "We can't give an ETA as of this time, but will provide an update once we know more," the company wrote.

Company says the shutdown was not triggered by one isolated event

Boltz said the decision was not a response to a single incident. According to the company, it has seen a steady increase over the past months in automated, AI-assisted probing of its infrastructure and has already dealt with several exploits. Those incidents were contained, it said, but the pattern had become hard to ignore: attackers were iterating faster than a team of Boltz's size could find and patch issues.

The pace of attacks accelerated over the past few days, the company said, pushing it to conclude that it could no longer run the swap service safely.

Boltz added that after reviewing the results of its own recent security scans, it could not responsibly switch swaps back on, especially while it was being actively targeted by what it described as multiple resourceful groups as it rushed to deploy fixes.

User funds remained under user control

Boltz lets customers move Bitcoin between the Lightning Network and Bitcoin's base layer without handing custody of funds to the company. Because users keep control of their assets through the process, Boltz said that "no user funds were ever at risk."

The company has not published transaction volume figures. DeFiLlama currently shows roughly $262,000 in total value locked on the protocol.

Even with swaps disabled, Boltz said its API remains online for cooperative refunds. Unilateral refunds continue to work as well because they do not depend on Boltz infrastructure, and customer support is still available.

Boltz says the attacks point to a broader shift

The company argued that what it is facing reflects a wider change for Bitcoin infrastructure operators. "What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis," Boltz wrote.

It also cautioned users not to expect swap services to resume any time soon.

AI's role in crypto attacks is drawing wider scrutiny

The suspension comes as the crypto industry wrestles with how AI is changing offensive and defensive security work.

On Tuesday, Ledger Chief Technology Officer Charles Guillemet said AI allows attackers to scan code and uncover vulnerabilities at "machine speed," while defenders are increasingly using AI to try to find those same flaws first. His comments came as fallout from the Coldcard exploit continued to spread, with losses nearing $130 million.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
590

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.