Bitcoin bridge Boltz halts swaps over attacks

TLDR

Boltz, a non-custodial Bitcoin bridge, has halted all swaps indefinitely after months of escalating automated attacks that its small team says it can no longer safely counter.

1. Boltz disabled its Bitcoin, Lightning and Liquid swap service on 3 Aug after AI-assisted exploit attempts repeatedly targeted the bridge despite earlier fixes.
2. User funds in integrated wallets remain under self-custody thanks to atomic swap design, though in-flight swaps rely on Boltzs refund processes.
3. The shutdown highlights growing security pressure on open source Bitcoin infrastructure and may push wallets to diversify or build their own swap backends.

Deep Dive

1. Halted Swaps After Escalating Attacks

Boltz, a bridge connecting Bitcoin mainchain, Lightning Network and Liquid, announced that attackers now iterate faster than a team our size can find and patch, and has disabled swaps indefinitely as of 3 Aug, early morning ET, according to its incident statement.

The team cited months of automated, AI-assisted probing and exploits, including recent targeting by multiple well-resourced groups, and concluded it cannot responsibly re-enable swaps under current conditions.

Before this full shutdown, Boltz had already turned off EVM-side swaps for assets like USDT, USDC, WBTC and TBTC on 1 Aug due to a bug, while Bitcoin, Lightning and Liquid swaps remained live until now.

2. Impact On Users And Funds

Boltz is non-custodial, using atomic swaps where users keep control of keys, so contained exploit losses hit Boltz itself rather than user wallets, and leading wallet providers have emphasized that customer funds remain under user control.

Wallets and services that relied on Boltz for swap plumbing, such as Bull Bitcoin, Aqua and ZEUS, have had to disable or rework their swap features, and Boltzs API is being used to process refunds for any in-flight swaps.

Unilateral refunds are possible on-chain without Boltz infrastructure, but operational friction and temporary loss of convenience are real for users who depended on one-click cross-layer swaps.

3. Broader Security Pressure On Bitcoin Infrastructure

The Boltz shutdown lands alongside large-scale attacks on Coldcard hardware wallets, underscoring that sophisticated, often automated attackers are increasingly targeting Bitcoin-related infrastructure rather than the base protocol itself.

Researchers and industry leaders are using incidents like Boltz to argue for more funding and independent audits for critical open source tooling that underpins Bitcoins layered ecosystem, from wallets to bridges.

Over time, wallets and services may diversify across multiple swap providers or host their own instances, but that also raises complexity and increases the need for professional security practices around what used to be community-maintained infrastructure.

Confidence: high, based on Boltzs own incident explanation and corroborating industry reports.

Conclusion

Boltz pausing swaps is less a hack of Bitcoin and more a stress test of the infrastructure that lets users move between layers and chains.

For crypto users, the main takeaway is that non-custodial design protects keys, but reliability now depends heavily on how well small teams can defend complex bridge code against fast-evolving, automated attacks.