Boltz went dark on Monday. The non-custodial bridge that handles swaps across Bitcoin's mainchain, Lightning Network and Liquid killed its service indefinitely after months of relentless, automated attacks left its team unable to patch vulnerabilities faster than attackers could exploit them.
The shutdown hit at 5:54 am ET on August 3rd without warning. Six hours later, Boltz posted the real reason: attackers armed with AI tooling were probing its infrastructure so aggressively that each exploit the team contained was quickly followed by another. The pattern became impossible to manage for a small, bootstrapped operation.
"Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch," the team wrote in their statement. They described themselves under "actively targeted by what appear to be multiple resourceful groups" and said they could no longer responsibly operate the service.
The Ripple Effect Across Wallets
The shutdown cuts off swap infrastructure used by popular Bitcoin wallets including Bull Bitcoin and Aqua, both of which now face the task of restoring Lightning and Liquid routing without Boltz's rails. For open-source developers across crypto, the shutdown crystallized a mounting concern: small teams running public infrastructure have no defense against attackers deploying AI to discover and exploit vulnerabilities at machine speed.
What makes this particularly sharp is that Boltz's atomic swap design meant user funds were never actually at risk during the attacks. The team emphasized this point clearly. "No user funds were ever at risk. Boltz is non-custodial by design. And as a fully bootstrapped company, the losses were ours alone." The exploits cost Boltz money, not its customers.
The move recasts an earlier August 1st notice where Boltz had already disabled EVM swaps (USDT, USDC, TBTC, WBTC and RBTC) due to what they called a bug in their EVM integration. That was just the opening move. The full security review that followed convinced the team there was no safe way forward right now.
The Boltz API remains live to process refunds for swaps still in flight, and unilateral refunds work without any Boltz infrastructure involvement. Still, there's no timeline for when swaps might resume. "What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis. Do not expect swap services to resume shortly," the team said.
This article is informational only and should not be considered financial advice or investment guidance.
