Boltz Suspends Bitcoin Swap Service as AI-Assisted Attacks Outpace Security Team

Boltz Halts Operations Amid Relentless AI-Assisted Attacks

Boltz suspended its Bitcoin swap service indefinitely on Monday, citing an overwhelming surge in AI-assisted hacking attempts that have outpaced its security team's ability to identify and patch vulnerabilities1

1

2

2

. The non-custodial Bitcoin swap service, which enables users to move Bitcoin between the Lightning Network and the blockchain's base layer, made the decision after experiencing a drastic acceleration of attacks in recent days. Currently holding approximately $262,000 in total value locked according to DeFiLlama, Boltz emphasized that no user funds were ever at risk throughout the attacks due to its non-custodial architecture1

1

3

3

.

Attackers Iterate Faster Than Defense Teams Can Respond

The platform revealed it has dealt with several exploits over recent months, each successfully contained, but the pattern reveals a troubling reality: attackers now iterate faster than a team of Boltz's size can find and patch vulnerabilities2

2

. The company stated this is not a response to a single incident but rather a steady rise in automated, AI-assisted probing of its infrastructure. After reviewing recent security scans, Boltz concluded it cannot responsibly re-enable swaps while being actively targeted by what appear to be multiple resourceful groups racing to deploy fixes1

1

. The operational pause highlights the difficulty smaller development teams face as AI-powered threats discover and adapt exploits at machine speed, creating an asymmetry the company does not believe will reverse2

2

.

Industry Faces Paradigm Shift in Cybersecurity Threats

Boltz characterized the situation as a major paradigm shift for Bitcoin services operating on open-source stacks, requiring careful analysis before swap services can resume1

1

3

3

. The announcement comes amid growing industry concerns about AI-driven attacks transforming the crypto threat landscape. Ledger CTO Charles Guillemet warned that AI allows attackers to scan code and uncover vulnerabilities at machine speed, while defenders increasingly rely on AI to find the same flaws first—comments made as fallout from the Coldcard exploit continued to grow, with losses nearing $130 million1

1

. PayPerQ, a pay-per-prompt AI service accepting Bitcoin payments, reported fighting off exploits every other week for several months, most believed to be AI-powered2

2

.

Automated Defense Emerges as Critical Need

Solana Foundation's chief information security officer, Michael Coates, told Cointelegraph in July that the industry has reached a tipping point where humans cannot scale to meet these threats. He emphasized that the only path forward is autonomous defense operating at the speed of machines2

2

. This sentiment reflects broader concerns about vulnerability discovery and exploitation accelerating beyond human response capabilities. Bridge exploits have become particularly prevalent, with the second quarter of 2025 already marking the most hacked quarter on record in terms of attack numbers. Exploits on bridges were the most common attack form in Q2 2025, resulting in $351 million worth of stolen funds, while major incidents like KelpDAO's $293 million hack and Drift Protocol's $280 million exploit dominated the quarter3

3

.

What Comes Next for Non-Custodial Services

While Boltz's API remains available to process cooperative refunds and customer support stays reachable, the company provided no timeline for resuming operations1

1

. Users retain the ability to execute unilateral refunds independently since these do not depend on Boltz's infrastructure. The platform's shutdown raises questions about the sustainability of smaller crypto projects facing AI-powered threats and whether the industry must consolidate resources or fundamentally rethink security architectures for open-source stacks. As AI-assisted hacking attempts continue evolving, the crypto sector watches closely to see whether this represents an isolated challenge or the beginning of widespread operational disruptions across Bitcoin services and other non-custodial platforms.