Intelligence Brief
Boltz has suspended its Bitcoin swap service until further notice after reporting months of automated, AI-assisted probing and several contained exploits.
The non-custodial protocol connects Bitcoin’s main chain with the Lightning Network and Liquid. Its suspension interrupted swap functions used by services including Bull Bitcoin, Aqua and ZEUS.
Boltz said attackers were adapting faster than its small development team could identify and patch weaknesses. The company did not identify the groups involved or publish technical evidence proving how artificial intelligence contributed to the attacks.
Update: Boltz will stay disabled until further notice.
Our API remains available to process refunds cooperatively. In any case, unilateral refunds will work, as they do not depend on our infrastructure.
Our support team stays reachable.
To be clear: this is not a response to a… https://t.co/kv8zWt4bym
— Boltz – Non-Custodial Bitcoin Bridge (@Boltzhq) August 3, 2026
The operator said customers did not lose funds and that it absorbed the operational losses. Those statements have not been independently audited. Its API remains available for cooperative refunds, while unilateral refund paths remain possible under the protocol’s non-custodial design.
No reopening date has been provided. Boltz said service will remain disabled while the team reviews new security findings and works to stay ahead of continued attacks.
Strategic Assessment
The shutdown exposes a defensive imbalance faced by small infrastructure teams.
Public code gives researchers and attackers equal access to implementation details. Automated tools can test more attack paths at lower cost, while maintainers must validate and deploy every fix without introducing another vulnerability.
Users benefit from Boltz’s non-custodial structure because the operator does not hold funds in the same manner as a centralised bridge. That reduced the reported custody impact. Dependent wallets still carry availability risk when one shared provider stops processing swaps.
The AI attribution requires caution. Boltz reported AI-assisted probing, but no public post-mortem has established which tools were used or whether automation materially changed the exploits.
