Boltz Freezes Bitcoin Swaps as AI-Assisted Attacks Outrun Its Fixes

Boltz has suspended its swap services until further notice after months of automated attacks accelerated beyond the small team’s ability to identify vulnerabilities and deploy fixes safely.

The company said it had contained several exploits but saw a sharp increase in “automated, AI-assisted probing” during the days before the shutdown. In its August 3 statement, Boltz said attackers now iterate faster than its developers can find and patch weaknesses, adding that multiple well-resourced groups appeared to be targeting its infrastructure.

The full suspension followed a narrower warning on August 1, when Boltz disabled swaps involving EVM-connected assets, including USDT, USDC, WBTC, TBTC and RBTC, because of an integration bug. Bitcoin mainchain, Lightning and Liquid swaps initially remained operational before the company took every swap route offline two days later.

Non-Custodial Does Not Mean Uninterruptible

Boltz stressed that no customer funds were exposed. Its atomic-swap design allows users to retain control of their assets rather than depositing them into a company-controlled wallet, while Boltz said it absorbed the losses associated with the contained exploits.

The distinction matters. Non-custodial architecture can reduce the risk of a centralized treasury being drained, but it cannot guarantee that the surrounding service will remain available. Boltz’s application programming interface remains online for cooperative refunds, while unilateral refunds can proceed without the company’s infrastructure. Support also remains available for unfinished transactions.

The interruption has spread beyond Boltz’s own website. Wallets and services including Bull Bitcoin, Aqua and ZEUS relied on Boltz infrastructure for some Lightning and Liquid conversions. Their users retained control of their coins, but affected swap and payment functions were disabled while developers searched for replacement routes or additional safeguards.

The AI Attribution Remains Unproven

Boltz has not published a technical post-mortem, vulnerability list or indicators explaining how it determined that artificial intelligence powered the attacks. AI tools can accelerate code analysis, endpoint testing and exploit modification, but the company’s attribution cannot yet be independently verified.

The operational imbalance is clearer than the attribution. Public code gives defenders transparency and community review, but it also gives automated attackers a continuously available target. For smaller infrastructure teams, the security challenge increasingly involves matching machine-speed reconnaissance rather than responding to isolated human-led attempts.

The shutdown comes during an unusually difficult period for Bitcoin security, following an unrelated Coldcard vulnerability linked to an estimated $114 million in losses. Boltz avoided a comparable customer-loss event, but its indefinite pause shows that resilience now depends on service continuity, refund mechanisms and defensive capacity-not custody design alone.