Boltz Suspends Bitcoin Swap Service Indefinitely Over AI-Assisted Attacks
Key Takeaways
- •Boltz disabled its Bitcoin swap service until further notice and said it cannot provide an ETA for restoration.
- •The company said the shutdown followed months of automated, AI-assisted probing and several contained exploits.
- •Boltz said users’ funds were never at risk because the service is non-custodial.
- •The company said its API can still process cooperative refunds and unilateral refunds remain available.
- •Boltz warned that AI-driven attacks reflect a broader shift for Bitcoin infrastructure operators and said swap services should not be expected to resume shortly.

Boltz, a non-custodial Bitcoin bridge, has suspended its Bitcoin swap service indefinitely, saying a surge in AI-assisted attacks has made it impossible to continue operating safely.
In posts on X on Monday, the company said swaps are disabled "until further notice" and that it cannot estimate when the service will return.
“We can't give an ETA as of this time, but will provide an update once we know more,” Boltz wrote.
Boltz is a non-custodial Bitcoin swap service that allows users to move Bitcoin between the Lightning Network and the blockchain’s base layer without giving the company custody of their funds. The company has not published transaction volume figures. According to DeFiLlama, Boltz currently holds about $262,000 in total value locked.
Because users keep control of their assets throughout the process, Boltz said "no user funds were ever at risk."
Boltz Swap Services are currently unavailable until further notice. We can't give an ETA as of this time, but will provide an update once we know more 🙏 — Boltz - Non-Custodial Bitcoin Bridge (@Boltzhq) August 3, 2026
"To be clear: this is not a response to a single incident," the company wrote. "Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch."
Boltz said the pace of attacks accelerated over the past few days, leading the company to conclude it could no longer safely operate the swap service. For users, the key operational detail is that the shutdown is framed as a security response rather than a custody issue, which is notable in a sector where bridge and swap services already face heightened scrutiny because they sit between layers of the Bitcoin stack.
"After reviewing the results of our own recent security scans, we cannot responsibly re-enable Boltz swaps, especially as we are being actively targeted by what appear to be multiple resourceful groups while we race to deploy fixes," the company wrote.
The company said its API remains available to process cooperative refunds, unilateral refunds continue to work because they do not depend on Boltz’s infrastructure, and customer support remains available.
Boltz said the attacks reflect a broader shift for Bitcoin infrastructure operators.
"What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis," the company wrote. "Do not expect swap services to resume shortly."
The announcement comes as the cryptocurrency industry grapples with how AI is changing cyberattacks. For infrastructure providers, that has put more emphasis on rapid patching, automated scanning, and defensive tooling, especially when services are open source and externally accessible.
On Tuesday, Ledger CTO Charles Guillemet warned that AI allows attackers to scan code and uncover vulnerabilities "at machine speed," while defenders are increasingly relying on AI to find the same flaws first. The comments came as fallout from the Coldcard exploit continued to grow, with losses nearing $130 million.