Boltz suspends Bitcoin swap services after AI-assisted cyber attacks
Boltz, a non-custodial Bitcoin swap service, halted operations indefinitely in August 2026 after months of AI-assisted hacking attacks that exploited vulnerabilities faster than its small team could patch them. While the service's non-custodial design protected user funds, Boltz determined it could no longer safely operate given the accelerating pace of machine-speed attacks.
What happened
Boltz, a non-custodial Bitcoin swap service, disabled its service indefinitely on August 3, 2026, after months of AI-assisted hacking attempts. The service said attackers were using automated AI-assisted probing to discover vulnerabilities in its infrastructure, and the company had dealt with several contained exploits over recent months.
Boltz stated that attackers were iterating and adapting exploits faster than its small development team could identify and patch them. In recent days, the company observed a drastic acceleration of attacks and determined it could no longer responsibly operate its swap services.
Reported impact
No user funds were at risk because Boltz's non-custodial design ensured users retained control of their coins throughout swaps, with built-in refund mechanisms. However, Boltz absorbed losses from exploits on its own books and determined the swap product could no longer operate safely.
Index analysis
Boltz's suspension highlights challenges faced by smaller development teams when confronted with machine-speed attacks. The company emphasized an asymmetry in defense: while its team worked at human pace to find and patch vulnerabilities, attackers using AI tools could discover and adapt exploits faster than defenses could be deployed.
Governance controls
Boltz conducted its own recent security scans, which informed the decision to suspend operations. The company stated it was being actively targeted by what appeared to be multiple resourceful groups.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.