Boltz, a non-custodial Bitcoin bridge, suspended operations after repeated AI-assisted attacks caused significant losses, though customer funds were protected by its non-custodial architecture.
Security & Exploits ·
Boltz, a non-custodial Bitcoin bridge, suspended its swap service following repeated AI-assisted attacks that inflicted significant losses. The shutdown was announced on August 3. Because of Boltz's non-custodial architecture, customer funds remained protected throughout the incident, though the company's small team found itself overwhelmed by the increasing sophistication of the attacks.
The bridge operated by holding Bitcoin in multisig wallets controlled by users rather than by Boltz itself, a design that shielded depositors from counterparty risk even as the service faced technical exploitation. The attacks appear to have targeted operational vulnerabilities in the swap mechanism itself rather than custody arrangements.
A group of experienced Bitcoiners has assumed control of Boltz and begun supplying capital and engineering resources to identify and remediate the security gaps. No timeline for service resumption has been announced, leaving the status of the bridge's future operations uncertain.