Boltz Suspends Bitcoin Swap Services Indefinitely as AI-Powered Attacks Outpace Its Team
Boltz, the non-custodial Bitcoin swap service that connects Bitcoin mainchain, the Lightning Network, and the Liquid sidechain, suspended all swap operations indefinitely on August 3, 2026. The shutdown was not triggered by a single incident. It was triggered by a pattern: months of AI-assisted attacks that had outrun the team’s capacity to respond.
A Critical Infrastructure Layer Goes Dark
“To be clear: this is not a response to a single incident,” Boltz wrote on X. “Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch.“
In the past few days before the shutdown, Boltz noted a drastic acceleration in attack activity. After reviewing its own internal security scans, the team concluded it could not responsibly re-enable services while being actively targeted by what it described as multiple resourceful groups racing to deploy fixes. Swap services remain offline until further notice with no return date given.
No User Funds Were Lost
Boltz’s HTLC-based non-custodial design protected user assets throughout the entire period. The company absorbed all operational losses on its own books. The refund API remains live for cooperative refunds, and unilateral refunds continue to work regardless of Boltz’s infrastructure status since they do not depend on the company’s servers. As Boltz stated plainly: it is non-custodial by design, and the losses were theirs alone.
Downstream Wallets Caught in the Fallout
The shutdown immediately affected downstream wallets and services including ZEUS, Aqua by JAN3, and Bull Bitcoin, all of which relied on Boltz infrastructure for swap functionality between Lightning and Liquid.
Samson Mow, whose team oversees Aqua wallet, moved quickly to reassure users, confirming that all funds on Aqua remain safe and fully in user control. He noted that Bull Bitcoin is a member of the Liquid federation and can convert Liquid Bitcoin to Bitcoin without a third party, meaning no Bull wallet user will have funds stuck on Liquid. Francis Pouliot of Bull Bitcoin confirmed the team is immediately prioritising restoring Lightning payment and Liquid swap functionality, evaluating multiple implementation paths, and collaborating closely with Boltz.
A Broader Warning for Bitcoin's Open Source Infrastructure
Swan Bitcoin co-founder Yan Pritzker put the implications plainly: “AI attackers are getting more and more sophisticated and small teams are going to have a tough time keeping up with the attacks. There’s a significant overhead to building and running enterprise security in the age of LLMs, which will price out many innovative startups wanting to work on services related to client funds, even non-custodial ones.”
The Boltz shutdown arrives alongside a separate AI-linked security incident: a major seed phrase exploit affecting the Bitcoin hardware wallet Coldcard, now believed to have led to the theft of over $100 million worth of Bitcoin, also traced to AI-assisted methods. Together the two incidents have sharpened concerns about what machine-speed attacks mean for the long-term sustainability of bootstrapped, open-source Bitcoin infrastructure teams.
Boltz described what it is seeing as a major paradigm shift for Bitcoin services operating on an open-source stack, one that needs careful analysis. The team has asked users not to expect swap services to resume shortly.