Boltz pulled the plug on its Lightning and Liquid swap services August 3rd after months of escalating automated attacks, many now powered by artificial intelligence. The shutdown happened without warning. Hours later, the company told users the pause would last indefinitely while it figures out how to defend itself.
The timing hit hard. Bitcoiners were already reeling from the Coldcard firmware disaster that had wiped wallets clean just days before. Now the infrastructure that three major wallets relied on for swaps was gone.
Boltz processes bitcoin moves between the main blockchain, the Lightning Network, and the Liquid sidechain. It never holds user funds directly, instead using hash time-locked contracts that let two parties swap assets without either one taking custody first. No customer money was lost in the attacks. Boltz absorbed the costs of the intrusions that did get through.
But the attackers kept coming. "Attackers now iterate faster than a team our size can find and patch," Boltz said on X. The company ran internal security scans and concluded it couldn't safely restart while multiple capable groups were actively hunting for vulnerabilities in its code.
Wallets Left Scrambling
Aqua Wallet, Bull Bitcoin, and Zeus all lost Boltz-powered swap access within hours of the halt. Aqua, built by JAN3, told users its Lightning and Liquid features would stay offline for the foreseeable future, though regular bitcoin and Liquid transactions kept working. Users could still recover their money on their own even with Boltz offline, and the company's support channels remained open.
JAN3 CEO Samson Mow said restoring that functionality is now his company's top priority. Aqua is exploring several technical fixes, including offering to help Boltz directly. He said user funds remain fully in custody, but the wallet ecosystem now faces a scramble to find backup providers or rebuild swap infrastructure from scratch.
The Bigger Picture
The Boltz shutdown exposes a fragility in the Lightning Network ecosystem. Several popular wallets had built their swap features on top of a single provider's infrastructure rather than running their own or distributing the load across multiple services. When that provider gets hit, the dominoes fall fast.
Boltz had given no restoration timeline as of August 4th. The company faces a choice: rebuild its defenses and relaunch, or stay offline while the market finds alternatives. Either way, the incident shows that as AI tools become more capable, crypto infrastructure needs to either scale its security operations or accept that some services will go dark when attackers get clever enough.
This article is for informational purposes only and does not constitute financial advice. Security incidents and service disruptions carry real risks for users and should be evaluated carefully before using any platform.
