Boltz Suspends Bitcoin Swaps Indefinitely Due to AI-Driven Attacks

Boltz pauses Bitcoin swaps indefinitely as AI-driven attacks outpace its security team Boltz, a non-custodial Bitcoin swap service that moves BTC between the Lightning Network and the blockchain’s base layer without taking custody of user funds, has suspended its swap operations “until further notice,” citing a surge in AI-assisted probing that has made safe operation impossible for the small team. In posts on X on August 3, 2026, Boltz explained the outage is not the result of a single breach but a months-long escalation in automated attacks. “Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch,” the company wrote. Boltz added it cannot provide an ETA for a restart. Key facts - Service status: Swaps disabled indefinitely; Boltz will provide updates when available. - Funds: Boltz says “no user funds were ever at risk” because swaps are non-custodial. Total value locked in Boltz is roughly $262,000, per DeFiLlama. The company has not released transaction volume figures. - Partial functionality: The Boltz API remains available for cooperative refunds. Unilateral refunds, which don’t depend on Boltz’s infrastructure, still work. Customer support is operating. - Root cause: A pattern of rapidly iterating, AI-augmented attacks that outpace the company’s ability to patch vulnerabilities. Why this matters Boltz’s decision highlights a widening security challenge across crypto infrastructure: attackers are increasingly using AI to scan open-source code and discover exploitable flaws at machine speed. Boltz said the recent acceleration in probing convinced its team they could not “responsibly re-enable Boltz swaps” while being actively targeted by multiple groups. Industry context Security leaders have been warning about this dynamic. Ledger CTO Charles Guillemet recently told the industry that AI lets attackers “scan code and uncover vulnerabilities at machine speed,” forcing defenders to adopt similar tooling just to keep up. The warning follows major incidents such as the Coldcard exploit, whose fallout has swelled to nearly $130 million in losses, underscoring how quickly automated attacks can scale. What to expect Boltz framed the outage as a symptom of a “major paradigm shift for Bitcoin services operating on an open source stack,” and urged caution: “Do not expect swap services to resume shortly.” For users, that means seeking alternatives for Lightning/on-chain swaps and watching for official updates from Boltz. For operators, it’s another signal to accelerate security audits, invest in automated defenses, and re-evaluate assumptions about how quickly teams can respond to AI-driven threats. Boltz said it will share further information as its investigation and remediation efforts progress. In the meantime, cooperative and unilateral refund paths remain available for affected users.