Boltz Bitcoin bridge halts indefinitely due to AI-powered attacks

Boltz, a non-custodial Bitcoin bridge that allows users to move assets between the Lightning Network and the main blockchain without surrendering custody, has shut down swaps indefinitely. The company cited a surge in AI-driven attacks as the reason, saying it can no longer operate safely.

Boltz disclosed that over recent months it has faced a steady escalation in automated, AI-assisted attempts to probe its infrastructure, leading to multiple exploits—all of which were contained but collectively signaled a dangerous trend. The pace of attacks accelerated significantly in recent days, prompting management to conclude the service could not be responsibly resumed while the company races to deploy security fixes.

The firm stressed this suspension stems not from any single incident but from a broader pattern in which attackers are now iterating faster than a small team can find and patch vulnerabilities. Boltz emphasized that no user funds were ever at risk, as the non-custodial model means the company never holds customer assets. The company's API remains available for cooperative refunds, unilateral refunds continue to function independently of Boltz infrastructure, and customer support is still accessible.

Boltz characterized the situation as a major paradigm shift for Bitcoin infrastructure operators building on open-source stacks, stating that no quick resumption of services should be expected. The suspension reflects a broader challenge facing the cryptocurrency industry as it grapples with how AI-enhanced tools are reshaping the nature of cyberattacks.