{"id":36275,"date":"2026-08-04T05:52:05","date_gmt":"2026-08-04T05:52:05","guid":{"rendered":"https:\/\/bitunikey.com\/news\/boltz-halts-swaps-as-ai-attacks-outpace-its-team\/"},"modified":"2026-08-04T05:52:48","modified_gmt":"2026-08-04T05:52:48","slug":"boltz-halts-swaps-as-ai-attacks-outpace-its-team","status":"publish","type":"post","link":"https:\/\/bitunikey.com\/news\/boltz-halts-swaps-as-ai-attacks-outpace-its-team\/","title":{"rendered":"Boltz halts swaps as AI attacks outpace its team"},"content":{"rendered":"<p><\/p>\n<div class=\"post-detail__content blocks\">\n<p class=\"is-style-lead\">Boltz suspended its Bitcoin swap services indefinitely on Aug. 3 after reporting months of automated, AI assisted probing and several contained exploits.\u00a0<\/p>\n<div id=\"cn-block-summary-block_557ed8fe7feaa2289ea918d94bda32aa\" class=\"cn-block-summary\">\n<div class=\"cn-block-summary__nav tabs\">\n        <span class=\"tabs__item is-selected\">Summary<\/span>\n    <\/div>\n<div class=\"cn-block-summary__content\">\n<ul class=\"wp-block-list\">\n<li>Boltz suspended swaps indefinitely after reporting months of automated, AI-assisted probing and several contained exploits.<\/li>\n<li>The company says attackers now adapt faster than its team can identify and patch flaws.<\/li>\n<li>No user funds were at risk, while Boltz says it absorbed all operational losses itself.<\/li>\n<li>Refund APIs and support remain available, but the protocol has provided no reopening date yet.<\/li>\n<li>Bull Bitcoin, Aqua and ZEUS reported service disruptions tied to their reliance on Boltz swaps.<\/li>\n<\/ul><\/div>\n<\/div>\n<p><!-- .cn-block-summary --><\/p>\n<p>The noncustodial swap provider said the attacks had accelerated sharply in recent days, leaving its development team unable to deploy fixes as quickly as attackers adapted their methods.<\/p>\n<p>The team said it could not responsibly restore swaps while it remained under active attack and reviewed findings from recent security scans. Boltz described the suspected attackers as \u201cmultiple resourceful groups,\u201d although it did not identify them or provide evidence independently confirming who conducted the attacks.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<h2 class=\"wp-block-heading\"><strong>Boltz swap shutdown followed an earlier EVM warning<\/strong><\/h2>\n<p>The wider shutdown followed an Aug. 1 <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/Boltzhq\/status\/2083527047083704753?s=20\" target=\"_blank\" rel=\"nofollow\">notice<\/a> concerning a bug in Boltz\u2019s Ethereum Virtual Machine integration. The service initially disabled swaps involving assets such as USDT, USDC, WBTC, TBTC and RBTC while stating that Bitcoin, Lightning and Liquid swaps remained operational. Two days later, it stopped all swap services.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Update: Boltz will stay disabled until further notice.<\/p>\n<p>Our API remains available to process refunds cooperatively. In any case, unilateral refunds will work, as they do not depend on our infrastructure.<\/p>\n<p>Our support team stays reachable.<\/p>\n<p>To be clear: this is not a response to a\u2026 <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/t.co\/kv8zWt4bym\">https:\/\/t.co\/kv8zWt4bym<\/a><\/p>\n<p>\u2014 Boltz \u2013 Non-Custodial Bitcoin Bridge (@Boltzhq) <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/x.com\/Boltzhq\/status\/2084311537502630319?ref_src=twsrc%5Etfw\">August 3, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>Boltz operates infrastructure connecting Bitcoin mainnet with the Lightning Network, Liquid and other supported networks. Its public API powers the main web application and outside integrations. Official documentation advises developers to use supported software development kits because they manage swap cryptography, recovery procedures and transaction states.<\/p>\n<p>Moreover, Boltz said no customer funds were exposed during the incidents because users retain control of their assets throughout its atomic swap process. The company also said it absorbed the losses associated with the contained exploits because it operates as a fully bootstrapped business. Those statements remain company claims because Boltz has not published a technical incident report or independent security review.<\/p>\n<p>The service\u2019s API remains online for cooperative refunds. Users can also complete unilateral refunds without relying on Boltz infrastructure, according to the company. Its support team remains available for customers with unfinished transactions.<\/p>\n<p>The distinction shows how noncustodial architecture can limit custody losses without preventing operational disruption. Users may retain their Bitcoin, but they cannot initiate new swaps through the affected service until operations resume or integrated wallets introduce alternative providers.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Wallets are seeking replacements for Boltz infrastructure<\/strong><\/h2>\n<p>Bull Bitcoin said the shutdown temporarily disabled Lightning payments and conversions between Liquid Bitcoin and onchain Bitcoin within its wallet. Standard Bitcoin transfers, Liquid transfers, wallet restoration and storage functions continued operating normally.<\/p>\n<p>The company said it was evaluating several replacement options and promised a separate mechanism for customers wishing to convert Liquid Bitcoin into onchain Bitcoin. It added that its Liquid Federation membership allows it to conduct conversions without depending on a third party.<\/p>\n<p>ZEUS also disabled its own deployment of the open source Boltz stack, while Aqua notified users that the service suspension affected its swap functions. Neither wallet reported customer asset losses.<\/p>\n<p>As crypto.news previously reported, Blockstream had integrated Boltz into its mobile wallet to support Lightning and Liquid swaps. The shutdown shows how applications that use shared swap infrastructure can face service interruptions even when their core wallet functions remain available.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Boltz has not provided a reopening date<\/strong><\/h2>\n<p>Boltz warned users not to expect swap services to resume soon. It has not published a remediation timetable, detailed vulnerability list or conditions that must be met before operations restart. The team said it would provide another update after assessing its options.<\/p>\n<p>The company\u2019s attribution to AI assisted activity also remains difficult to verify without technical indicators. Automated scanning can increase the speed and volume of attacks, but Boltz has not explained how it determined artificial intelligence played a role.<\/p>\n<p>In related coverage, crypto.news reported that Solana Foundation security chief Michael Coates expects artificial intelligence to strengthen both attackers and defensive systems. Boltz\u2019s next update is expected to clarify whether it will introduce automated monitoring, outside audits or changes to its open source infrastructure before restoring swaps.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Boltz suspended its Bitcoin swap services indefinitely on Aug. 3 after reporting months of automated, AI assisted probing and several contained exploits.\u00a0 Summary Boltz suspended swaps indefinitely after reporting months&hellip;<\/p>\n","protected":false},"author":1,"featured_media":33247,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-36275","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/36275","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=36275"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/36275\/revisions"}],"predecessor-version":[{"id":36276,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/36275\/revisions\/36276"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/33247"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=36275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=36275"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=36275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}