AI attacks force BTC bridge to suspend

TLDR

The non-custodial Bitcoin bridge Boltz has suspended all swap services indefinitely after a surge of AI-assisted attacks made it unsafe to keep operating.

1. Boltz, a small Bitcoin bridge between main chain, Lightning and Liquid, disabled swaps after months of contained exploits and rapidly increasing automated probing of its infrastructure.
2. No user funds were lost because Boltz is non-custodial, but the project itself absorbed losses and is processing refunds while warning of a broader security paradigm shift.
3. The halt underscores an AI powered arms race around Bitcoin infrastructure, echoing recent Coldcard wallet issues, and raises hard questions for small teams running open source bridges.

Deep Dive

1. What Happened To Boltz

Boltz, a non-custodial Bitcoin (BTC) swap service that bridges the base chain with Lightning and the Liquid sidechain, has shut down swaps until further notice after repeated AI-assisted attacks on its stack. Reports note that Boltz holds around 262,000 dollars of value locked, so this is a niche but symbolically important bridge rather than a systemically large venue.

In posts on X summarized by Decrypt, Boltz said it has seen a steady rise in automated, AI-assisted probing and several exploits in recent months, all contained but increasingly frequent, and that in recent days attackers now iterate faster than a team our size can find and patch Boltz suspension.

Boltz emphasized that no user funds were at risk because users retain custody throughout the swap flow, and that both cooperative refunds via its API and unilateral refunds that bypass its infrastructure continue to work. The losses from prior exploits were borne by the project itself.

2. AI-Assisted Attack Dynamics

Boltz described the situation as a major paradigm shift for Bitcoin services built on open source software, where attackers use AI tools to scan code, probe boundaries and chain vulnerabilities at machine speed.

This is consistent with broader coverage that AI now poses a more immediate threat to Bitcoins custody stack than speculative quantum attacks, by accelerating the discovery of flaws in wallet software, hardware and operational processes AI threat to Bitcoin custody.

Ledgers CTO similarly warned that AI is letting attackers find vulnerabilities at machine speed, citing both the Coldcard firmware exploit, which led to roughly 130 million dollars of Bitcoin losses, and an AI discovered Zcash bug that could have enabled unlimited minting hardware wallet security and AI.

3. What Crypto Users Should Watch

For users, Boltzs shutdown is a reminder that non-custodial design protects ownership but does not eliminate infrastructure risk, especially for smaller teams maintaining complex bridges and swap logic under active attack.

Recent Coldcard incidents show that AI-assisted attackers can move from vulnerability discovery to automated sweeps of thousands of wallets, driving both large direct losses and reactive on chain movement by cautious holders Coldcard chaos and Bitcoin flows.

Conclusion

Boltzs suspension does not threaten Bitcoin itself or directly impact most holders, but it illustrates how AI is rapidly changing the economics of attacking and defending Bitcoin infrastructure.

As AI tools lower the cost of probing open source stacks, smaller bridge and wallet teams face growing pressure to invest in continuous automated security reviews or narrow their scope. Users who pay attention to how projects respond to this shift will be better positioned to judge which services are evolving their defenses and which may be lagging.