Boltz Pulls the Plug on Bitcoin Swaps as AI-Powered Hackers Outpace Its Team
Bitcoin swap protocol Boltz shut down services indefinitely after AI-assisted attacks — no funds were lost, but the halt is a warning sign for holders.
If you’ve moved Bitcoin through the Lightning Network recently using a wallet like Aqua or Bull Bitcoin, there’s a decent chance you’ve relied on Boltz without even knowing its name. That’s why it matters that, on August 3, Boltz — one of the most widely used tools for swapping Bitcoin between the Lightning Network and other formats — switched off its swap services indefinitely, blaming a wave of AI-assisted hacking attempts it says its small team simply can’t keep up with.
The good news first: Boltz says no customer Bitcoin was lost. The bad news is what this shutdown signals about the arms race between crypto infrastructure teams and increasingly automated attackers.
What actually happened
The outage began at 5:54 a.m. ET, cutting off Lightning and Liquid swap rails used by wallets including Aqua and Bitcoin Bull. About six hours later, the Boltz team explained why in a public statement, saying it had seen “a steady rise in automated, AI-assisted probing” of its infrastructure over recent months, alongside several exploit attempts that were each contained.
“The pattern is clear: attackers now iterate faster than a team our size can find and patch,” the team wrote, adding that the intrusions appeared to be coming from “resourceful groups” and that it could not “responsibly re-enable Boltz swaps” under those conditions.
Crucially, Boltz operates on a non-custodial model, meaning it never holds users’ Bitcoin directly — which is why the company says no funds were lost despite the repeated exploit attempts. Boltz also said it absorbed the operational costs of dealing with the attacks itself. Its API is still online and is currently being used to refund any swaps that were already in progress when the halt began.
Part of a bigger pattern
This wasn’t Boltz’s first stumble this week. On August 1, the protocol had already paused its Ethereum Virtual Machine (EVM) swaps after discovering an integration bug — this new halt shifts the focus specifically onto Bitcoin-side swaps.
Boltz’s troubles arrive alongside a string of other incidents hitting crypto infrastructure in recent days. On July 31, synthetic asset protocol Metronome suffered roughly $16 million in losses tied to a delay in its price oracle. On August 1, an “Adform script poisoning” incident tampered with the copy-paste function some wallets use for addresses — a classic trick for silently redirecting funds. Separately, a vulnerability in Coldcard hardware wallet firmware has reportedly been linked to around $116 million in drained Bitcoin, making it the most damaging incident in this recent run.
Lucas Ferreira of Bitcoin-focused nonprofit Vinteum summed up the underlying tension: “Boltz has a brilliant team, but it’s a small team facing increasingly sophisticated, AI-powered groups of hackers.”
How wallets are responding
Wallet providers that lean on Boltz’s plumbing moved quickly to reassure users. Francis Pouliot, CEO of Bull Bitcoin, said his company was working to restore the swap features that were affected. Samson Mow, CEO of JAN3 — the firm behind the Aqua wallet — said his team was coordinating with Boltz to bring functionality back to normal. Lightning wallet ZEUS went further, taking its own instance offline in solidarity with the Boltz downtime and promising updates as they become available.
Why this matters for everyday holders
For everyday Bitcoin users, this episode is a reminder that a lot of the “invisible” infrastructure making Lightning payments and swaps feel seamless is run by small, specialised teams — and those teams are now up against attackers who can automate and scale their probing with AI tools. Boltz’s non-custodial design meant this particular scare didn’t cost users a single satoshi, which is exactly the kind of design choice worth looking for when picking a wallet or swap service.
But the broader trend — AI-assisted attacks hitting swap protocols, oracle systems, wallet software and even hardware firmware within the same week — suggests defenders across the crypto industry are being tested harder and faster than before. If you use Lightning-based swaps regularly, it’s worth keeping an eye on official channels from your wallet provider rather than assuming service will simply resume on its own.
Read more: XRP Ledger Had a Data-Flood Scare — Here’s Why Your Coins Were Never in Danger
