BTC bridge halts swaps after AI attacks

TLDR

A major Bitcoin bridge called Boltz has shut down its swap service indefinitely after a wave of AI assisted attacks exposed security weaknesses.

1. Boltz, a non custodial Bitcoin bridge, paused all swaps after repeated AI driven exploits outpaced its small teams ability to patch safely.
2. The incident fits a broader pattern where AI tools find vulnerabilities across Bitcoin projects and hardware wallets faster than defenses can adapt.
3. For crypto users, the key impact is rising operational risk around bridges and custody, making venue choice, audits and redundancy more important than ever.

Deep Dive

1. What Happened At Boltz

Boltz is a non custodial Bitcoin (BTC) bridge that lets users swap between the Bitcoin main chain, Lightning Network and Liquid sidechain without handing over their keys.

The team announced that all swap services are disabled until further notice, keeping only refund APIs online. They report months of automated, AI assisted probing and several contained exploits that recently accelerated to the point attackers were iterating faster than they could safely patch.

Boltz stresses that user funds were not at risk because users retain custody, but the protocol itself absorbed losses and is now being actively targeted by multiple well resourced groups, so re enabling swaps soon is unlikely.

2. AI And Bitcoin Security

Boltzs decision is not isolated. A volunteer Bitcoin Red Team recently ran an AI heavy ecosystem audit, finding 4,962 issues across 390 projects, including 85 critical and 635 high severity bugs, with about 91 percent of findings generated by automated agents.

Separately, a long hidden firmware flaw in Coldcard hardware wallets allowed attackers to drain up to around 2,055 BTC, with on chain activity surging as users rushed to move funds after the Coldcard hardware wallet exploit. Industry voices note that AI is now able to spot such issues in open source code at machine speed.

This creates a clear arms race. AI is amplifying both attacker capabilities and defender audits, and projects that rely on open source stacks without continuous security investment are becoming increasingly exposed.

3. Impact And What To Watch

For users, the Boltz shutdown highlights that even non custodial services can face severe operational risk when the surrounding infrastructure is under attack, affecting liquidity and routing rather than directly seizing your coins.

Institutional players are already reacting. BitGo has migrated about 7.4 billion dollars in Wrapped Bitcoin liquidity to Chainlinks CCIP cross chain infrastructure, explicitly to reduce traditional bridge risk.

Key things to watch are which Bitcoin services publish independent security audits, how quickly projects patch AI discovered bugs, and whether more bridges or wallet providers temporarily disable features rather than operate under rising exploit pressure.

Conclusion

Boltz halting swaps shows how AI assisted attackers can overwhelm a small team maintaining critical Bitcoin infrastructure, even when user custody design is sound.

Combined with large scale audits and real losses from hardware wallet flaws, the episode marks a shift in Bitcoin risk from protocol level to the bridges, wallets and services built around it, making security maturity a first class factor in how crypto users choose where and how they move BTC.