Overview
- Boltz halted all swap services on Aug. 3 after months of automated, AI-assisted probing that the company says accelerated sharply in the days before the shutdown.
- The team says no user funds were at risk because swaps use atomic contracts that keep users in control and the platform’s API remains available for cooperative refunds while unilateral refunds still work.
- Wallets that relied on Boltz for cross-layer swaps, including Bull Bitcoin, Aqua and ZEUS, immediately lost swap, Lightning and Liquid conversion features and are seeking alternative providers.
- Boltz says it absorbed operational losses from contained exploits and suspended services because its small, bootstrapped team could not keep pace with attackers; the company has not published a detailed technical report or independent attribution.
- Security analysts warn the case highlights a wider trend of AI-accelerated scanning that raises fixed security costs for small open-source teams and could push users toward larger custodians with bigger security budgets.