Boltz shuts Bitcoin swaps after AI exploits outpaced defense

Boltz, a Bitcoin swap service, halted operations after automated, AI-assisted probing led to several contained exploits that accelerated faster than the team could patch. The company posted on Aug. 3 that its non-custodial design kept every user's funds safe through months of attacks. But the cost of defending the service became unsustainable, and swaps will remain offline until further notice.

Boltz bridged Bitcoin's layers by switching between on-chain BTC, the Lightning Network, and Liquid. Each swap was non-custodial, meaning users retained control of their coins with a built-in refund path if something went wrong before settlement. That structure protected user balances. Keeping the business running was a separate problem. Boltz absorbed the losses from exploits on its own books, then decided the swap product could no longer operate safely.

The attackers automated the discovery-to-exploit pipeline faster than the team could build, test, and ship fixes, Boltz said. The advantage went to whoever could automate the entire defensive chain: confirming a finding, assessing severity, building a fix, and deploying it without breaking anything else. A small team may not be able to validate and patch vulnerabilities as quickly as attackers can find and exploit them. Boltz's statement indicates that its attackers reached that speed before its defenses did.

Google noted in a July 30 post about Chrome that automated triage now filters noise and routes issues to the right owner. The company estimated that the process saves hundreds of developer hours a month. Large language models generate candidate fixes for most vulnerabilities Chrome finds. Separate AI agents review that work and write tests before a human signs off. That gap between well-funded defense and everyone else is what small teams face.

Anthropic analyzed 832 accounts it had banned for AI-enabled cyber activity between March 2025 and March 2026. Its researchers found attackers increasingly relying on AI to scan targets and collect data. Google's Threat Intelligence Group has described the same move toward industrial-scale use of generative models in offensive workflows.

CISA moved in the same direction in June, telling federal agencies that AI is helping researchers and attackers find flaws at a similar pace. It pushed the riskiest vulnerabilities toward patch windows measured in days, a sharp break from the usual cycle. The Open Source Security Foundation is now building tools to triage and validate AI-generated vulnerability reports before they reach a maintainer. OpenJS has separately warned that a flood of low-quality, AI-written reports can consume maintainer time even when no real vulnerability exists.

Small teams end up fighting on two fronts at once: real automated exploit attempts and automated noise that eats the attention needed to catch them. That two-front problem turns security into a barrier to entry for crypto infrastructure. Staying safe now takes continuous automated testing and a fast, safe patch-release process. Teams also need round-the-clock monitoring, external audits and bug bounties. They must be able to shut down one broken component without taking down the whole product.

Smaller teams facing that bill have a handful of options: raise money specifically for security, outsource it, merge with a larger provider, narrow their offerings, or shut down a product.

TRM Labs found that infrastructure and operational compromises accounted for roughly 76% of crypto hack losses in the first half of 2026. These attacks targeted systems, credentials and signing infrastructure, even though they represented only about 15% of incidents. CertiK identified wallet compromise as the costliest category over the same period, with more than $444 million stolen across 33 incidents. Attackers are moving toward the operational layer, the teams and processes running the systems, and away from the cryptography underneath them.

Boltz's shutdown illustrates the pressure on small teams. Open-source security foundations are developing shared triage systems, but they are not yet widely deployed. Traffic may continue drifting toward exchanges, custodians and infrastructure platforms with budgets for machine-speed defense. Boltz's swap service remains offline. The team has not provided a timeline for a potential restart.