Boltz suspends Bitcoin swap service after surge in AI-driven attacks

Boltz suspended its swap services indefinitely on Aug. 3 after months of automated, AI-assisted probing and several contained exploits, saying attackers were adapting faster than its team could identify and patch flaws. The shutdown followed an Aug. 1 warning tied to a bug in its Ethereum Virtual Machine integration, which had initially led the company to disable swaps involving assets including USDT, USDC, WBTC, TBTC and RBTC while keeping Bitcoin, Lightning and Liquid swaps online before halting all swaps two days later. Boltz has now also updated its PGP-signed warrant canary after it lapsed around July 30, despite a stated 60-day refresh commitment. The company said the lapse was an oversight while its team was dealing with the prolonged AI-assisted infrastructure attacks that ultimately forced the service suspension. Boltz said its platform is non-custodial and that user funds were never at risk. Its API remains available for cooperative refunds, unilateral refunds can still be completed without Boltz infrastructure, and customer support remains active. Boltz currently holds around $262,000 in total value locked, according to DeFiLlama. The outage has also disrupted services at Bull Bitcoin, Aqua and ZEUS, highlighting how wallets that rely on shared swap infrastructure can face interruptions even when core wallet functions remain available and how prolonged AI-assisted pressure on non-custodial infrastructure may steer users toward larger custodial services that can stay online.