- Published on
This Bitcoin Bridge Shut Itself Down Because AI Was Finding Bugs Too Fast
- Authors
- Name
- DeepHorus
Bitcoin bridge provider Boltz has indefinitely suspended its swap service, citing a surge in AI-assisted attacks that have outpaced its ability to patch vulnerabilities. In a series of posts on X on Monday, the company said swaps are disabled "until further notice" and offered no timeline for restoration. "We can't give an ETA as of this time, but will provide an update once we know more," Boltz wrote.
Boltz operates a non-custodial service that lets users move Bitcoin between the Lightning Network and the base blockchain without surrendering control of their funds. Because users retain custody throughout, Boltz stressed that "no user funds were ever at risk." The platform currently holds approximately $262,000 in total value locked, according to DeFiLlama.
"To be clear: this is not a response to a single incident," the company explained. "Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch."
The pace of attacks accelerated in recent days, prompting Boltz to conclude it could no longer operate safely. After reviewing internal security scans, the company stated it "cannot responsibly re-enable Boltz swaps," especially while being actively targeted by multiple resourceful groups. The firm said its API remains available for cooperative refunds, and unilateral refunds still function independently of Boltz's infrastructure.
Boltz described the situation as a "major paradigm shift for Bitcoin services operating on an open source stack" that requires careful analysis. The company warned, "Do not expect swap services to resume shortly." The announcement coincides with broader industry concerns about AI-driven cyberattacks.
On Tuesday, Ledger CTO Charles Guillemet warned that AI enables attackers to scan code and uncover vulnerabilities "at machine speed," while defenders must race to find flaws first. His comments followed the ongoing Coldcard exploit, with losses nearing $130 million. Boltz's suspension underscores the growing threat that automated tools pose to cryptocurrency infrastructure, leaving smaller teams particularly vulnerable. No date has been set for the service's return, as the company continues to evaluate its security posture.
