Boltz Suspends Bitcoin Swap Service as AI-Assisted Attacks Outpace Security Team

This Bitcoin Bridge Shut Itself Down Because AI Was Finding Bugs Too Fast

Boltz says no user funds were at risk because the platform is non-custodial. Boltz has suspended its Bitcoin swap service indefinitely, saying a surge in AI-assisted attacks has left it unable to continue operating safely. In a series of posts on X on Monday, the company said swaps are disabled "until further notice" and that it cannot provide an estimate for when the service will return. "We can't give an ETA as of this time, but will provide an update once we know more," Boltz wrote. Boltz is a non-custodial Bitcoin swap service that lets users move Bitcoin between the Lightning Network and the blockchain's base layer without giving the company custody of their funds. Boltz has not published transaction volume figures. Boltz currently holds around $262,000 in total value locked, according to DeFiLlama. Because users retain control of their assets throughout the process, Boltz said "no user funds were ever at risk." "To be clear: this is not a response to a single incident," the company wrote. "Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch." Boltz said the pace of attacks accelerated over the past few days, leading it to conclude it could no longer safely operate its swap service. "After reviewing the results of our own recent security scans, we cannot responsibly re-enable Boltz swaps, especially as we are being actively targeted by what appear to be multiple resourceful groups while we race to deploy fixes," the company wrote. The company said its API remains available to process cooperative refunds, unilateral refunds continue to work because they do not depend on Boltz's infrastructure, and customer support remains available. Boltz argued the attacks reflect a broader change facing Bitcoin infrastructure operators. "What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis," the company wrote. "Do not expect swap services to resume shortly." The announcement comes as the cryptocurrency industry grapples with how AI is changing cyberattacks. On Tuesday, Ledger CTO Charles Guillemet warned that AI allows attackers to scan code and uncover vulnerabilities "at machine speed," while defenders are increasingly relying on AI to find the same flaws first. The comments came as fallout from the Coldcard exploit continued to grow, with losses nearing $130 million.

Boltz Suspends Bitcoin Swaps amid Surge in AI-Assisted Attacks

The non-custodial protocol said attackers are discovering and adapting exploits faster than its small development team can identify and patch them. Boltz, a non-custodial Bitcoin swap service, says it is disabling its service until further notice after a rise in AI-assisted hacking attempts over the last few months. In a post to X on Monday, Boltz said the decision came after seeing a steady increase in "automated AI-assisted probing" of its infrastructure this year. "Over the past months... we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch." "After reviewing the results of our own recent security scans, we cannot responsibly re-enable Boltz swaps, especially as we are being actively targeted by what appear to be multiple resourceful groups while we race to deploy fixes." Boltz's operational pause highlights the difficulty that smaller development teams are facing, as attackers discover vulnerabilities and adapt exploits faster than they can respond. Source: Boltz "In the past few days alone we saw a drastic acceleration [of attacks] and we do not believe this asymmetry will reverse," said Boltz. Solana's security chief calls for automated defense In July, Solana Foundation's new chief information security officer, Michael Coates, told Cointelegraph there is a need to switch to automated defenses in the age of AI. "We're at a tipping point as an industry where humans cannot scale to meet these threats," said Coates. "The only path forward we have is to have autonomous defense that operates at the speed of machines." PayPerQ, a pay-per-prompt AI service that takes payment in Bitcoin and other cryptocurrencies, said it has also been dealing with a surge in exploits, possibly AI-powered. "We've been fighting off exploits every other week for several months, most of which we believe are AI-powered. It's a very dangerous time out there." No user funds at risk Boltz lets users perform non-custodial, trustless atomic swaps, moving Bitcoin and Bitcoin-denominated assets between the mainnet and different layers of Bitcoin such as Lightning Network and Liquid Network. DefiLlama shows total value locked on Boltz at the time of writing is $180,860. Boltz said no user funds have ever been at risk, as all Boltz swaps use advanced cryptography and are non-custodial, which means users retain full control of their assets throughout the swap process. Boltz said its API will remain available to process refunds, and its support team will stay reachable. "What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis. Do not expect swap services to resume shortly."

Boltz Halts Services as AI-Assisted Hack Attempts Increase

Platform says user funds remained safe throughout the attacks Boltz, a non-custodial Bitcoin exchange service, claims that it is shutting down its services indefinitely due to increased instances of hacking through the use of AI over the last few months. In a post shared on X, the team stated that even though there have been multiple instances of exploitation in the last few months, each attack was tackled separately; however, the rate at which the attacker is evolving has started to become too much for a small security team to catch up with. Boltz's operational halt is an example of how small development teams are struggling to keep up with the pace at which the attackers discover vulnerabilities and adapt faster than the response. Platform Says Attackers Are Adapting Faster Than Security Defences Boltz, in its X post, says that the reason behind the move is the steadily increasing number of automated attempts to exploit our services assisted by AI. The company added that it faced various attacks since the beginning of the year, but despite dealing with each successfully, the trend is becoming hard to manage as hackers keep repeating attacks much faster than the company can fix things. Boltz also stated that, "Over the past months... we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch [...] In the past few days alone we saw a drastic acceleration of attacks, and we do not believe this asymmetry will reverse." Following a review of the security scans, Boltz said it cannot responsibly re-enable swaps while it is still under active attack from multiple parties and groups, especially when fixes are in progress. Boltz assured that no user funds were ever at stake since all swaps conducted on the platform involve high-level cryptography and are non-custodial, meaning that the users maintain complete control over their funds during the swapping procedure. Boltz stated that their API would be accessible for processing refunds. "What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis. Do not expect swap services to resume shortly," Boltz said. Data by DefiLlama showed that total value locked on Boltz at the time of writing was $262,200 (roughly Rs. 2.5 crore). As per the analysis from market insights provider Unfolded based on data from DefiLlama, the second quarter of 2026 is already the most hacked quarter on record in terms of the number of attacks. KelpDAO's $293 million (roughly Rs. 2,774 crore) hack and Drift Protocol's $280 million (roughly Rs. 2,652 crore) exploit were the largest incidents of the quarter. Exploits on bridges were the most common form of attack in Q2 2026, which saw $351 million (roughly Rs. 3,325 crore) worth of funds stolen by exploiting bridges.