Bitcoin Bridge Boltz Halts Operations as AI-Powered Attacks Outpace Security Patches

Indefinite Suspension Due to Accelerating Threat Velocity

Boltz, a non-custodial Bitcoin swap service connecting the Lightning Network to the base blockchain layer, has ceased operations indefinitely. Through announcements on X, the platform disclosed that it can no longer operate safely given the current threat environment, though it declined to estimate when services might resume.

The service, which holds roughly $262,000 in total value locked according to DeFiLlama, enables users to convert Bitcoin between layers while maintaining self-custody throughout the transaction process.

AI-Assisted Probing Outpaces Patch Deployment

Boltz disclosed a troubling reality: adversaries leveraging machine learning have been conducting increasingly automated reconnaissance against its infrastructure, with successful attack attempts mounting over recent months. While the company successfully contained each exploited vulnerability individually, the underlying trend became undeniable—threat actors equipped with AI capabilities are identifying and weaponizing security gaps at a pace that substantially exceeds the company’s ability to locate and deploy fixes.

The company emphasized this stems from a structural problem rather than isolated incidents. In the immediate days preceding the announcement, attack frequency accelerated dramatically, pushing Boltz to conclude that continuing operations presented unacceptable risk to its platform and users.

Boltz characterized the situation as reflecting a significant paradigm shift for Bitcoin services built on open source infrastructure, noting that defenders can no longer expect to outpace attackers operating at machine speed.

User Assets Secure Despite Service Halt

The suspension carries no direct threat to customer funds given Boltz’s non-custodial architecture—users retain control of their Bitcoin at all times. The platform’s application programming interface continues accepting cooperative refund requests, and users can independently execute unilateral refunds without relying on Boltz’s operational infrastructure.

The situation reflects a broader challenge emerging across cryptocurrency infrastructure. Charles Guillemet, Chief Technology Officer of Ledger, recently observed that artificial intelligence enables attackers to scan source code and expose vulnerabilities “at machine speed,” effectively eliminating the time advantage defenders once possessed. As security teams increasingly adopt AI-powered vulnerability discovery tools to identify flaws before attackers do, a dangerous equilibrium threatens to solidify: a perpetual cycle where exploitation capabilities remain locked in competition with detection abilities.

The incident demonstrates that as AI amplifies both attack and defense capabilities across cryptocurrency, blockchain infrastructure operators and decentralized finance projects must fundamentally reassess their security models to maintain user protection in an evolving threat landscape.

Source: Boltz, via Decrypt. Not financial advice.