Via zonebitcoin.co
The non-custodial Bitcoin swap service says automated attacks discovered bugs faster than its small team could patch them, disrupting Lightning Network and Liquid sidechain wallets in the process.
Boltz, the non-custodial swap service that connected Bitcoin’s mainchain to the Lightning Network and Liquid sidechain, has pulled the plug on all swap operations indefinitely. The reason: AI-assisted attackers were finding and exploiting vulnerabilities faster than the team could fix them.
The shutdown took effect on August 3, 2026.
What happened and why it matters #
Over the preceding months, Boltz experienced a sharp escalation in automated, AI-assisted attacks targeting its infrastructure. These were sophisticated, machine-driven vulnerability scans that could identify and exploit bugs at a pace that overwhelmed the company’s small development team.
Boltz was a key piece of Bitcoin’s interoperability plumbing, enabling atomic swaps between Bitcoin mainchain, Lightning Network, and Liquid sidechain. Wallets like Aqua and Bull Bitcoin relied on Boltz’s backend to offer their users Lightning and Liquid functionality. With Boltz offline, both wallets are now scrambling to find alternative providers.
No user funds were lost. Boltz’s atomic swap architecture meant users maintained control of their assets until a swap was fully completed. Any operational losses from the exploits were absorbed entirely by Boltz itself. The Refund API also remains operational, so anyone with pending transactions can still recover their funds.
Boltz’s team indicated that substantial infrastructure changes are needed before they can safely resume operations.
AI as an attack vector: a new paradigm #
This incident sits at the intersection of two trends: AI tools are becoming dramatically more capable at code analysis, pattern recognition, and automated exploitation, while the crypto space is full of open-source, publicly auditable code. When your codebase is open for anyone to inspect, it’s also open for any AI model to scan for weaknesses. For a small team like Boltz, the math simply doesn’t work when adversaries can discover vulnerabilities at machine speed and defense operates at human speed.
Ripple effects across Bitcoin’s Layer 2 ecosystem #
Aqua and Bull Bitcoin, both of which integrated Boltz’s services, now face a gap in their product offerings. Both wallets are reportedly seeking alternative providers. For the Liquid sidechain specifically, the disruption is even more acute, as Liquid has always had a smaller ecosystem of service providers compared to Lightning, and losing Boltz removes one of the more reliable on-ramps and off-ramps for the sidechain’s users.
Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our