AI Attack Freezes Boltz, Rattles Lightning Network Users
Boltz, a company that facilitates bitcoin swaps between the main blockchain, Lightning Network, and Liquid sidechain, shut down all its swap services on August 3 following months of automated attacks it said were increasingly powered by artificial intelligence (AI). The timing rattled bitcoiners as it coincided with the Coldcard hardware wallet exploit, though no customer funds were lost.
Boltz took its systems offline early that morning without explanation, later telling users on X that the pause would last “until further notice.” The company explained that attackers had been probing its code for months, with the pace accelerating sharply in recent days. “Attackers now iterate faster than a team our size can find and patch,” Boltz stated. After internal security scans, it concluded it could not safely bring services back online while multiple capable groups were actively targeting it.
No customer funds were lost because Boltz never held user money directly. It uses hash time-locked contracts, which allow two parties to swap assets without either taking custody of the other’s funds first. Users can still recover their money independently, and the company’s support channels remain open. Boltz covered the cost of attacks that did get through.
Wallets Scramble to Adjust
The shutdown hit several popular Bitcoin wallets that had built Lightning features on top of Boltz’s infrastructure. Aqua Wallet, built by JAN3, told users its Lightning and Liquid swap features would stay down for the foreseeable future, though regular transactions kept working. CEO Samson Mow said restoring that functionality is the top priority, with the team exploring several technical fixes, including offering to help Boltz directly. Bull Bitcoin reported similar issues, with Lightning payments and Liquid-to-Bitcoin conversions temporarily down. CEO Francis Pouliot stressed that no customer funds on Liquid would be stuck. Zeus Wallet, which ran its own copy of Boltz’s open-source software, also shut down its version of the service, though its channel-based Lightning service and Lightning addresses still work. Blockstream turned off in-app swaps in its wallet due to its reliance on Boltz, while keeping other Liquid features running.
Not every wallet felt the impact. Seth For Privacy, COO at Cake Wallet, explained that Cake Wallet and its payment tool Radarchat kept working because they don’t depend on Boltz. Cake Pay’s Lightning option was briefly knocked out but was switched to a different backend within hours.
Broader Concerns Over Lightning Infrastructure
The outage reopened arguments about what constitutes genuine use of the Lightning Network. Paul Sztorc, founder of Layertwo Labs, argued that many wallets marketed as Lightning wallets actually depend on swap services like Boltz behind the scenes rather than routing payments through Lightning channels directly. Francisco Calderón, builder of peer-to-peer Lightning bots, said his own projects have faced constant attacks and that he would shut down rather than risk user funds.
AMBOSS, a Lightning Network data tracker, pushed back on the idea that the outage signals a wider collapse. It noted that the disruption is concentrated in Boltz and Zeus swap infrastructure and one exchange-linked node, while total Lightning capacity continues to climb and major exchange nodes grow. Public node counts have stabilized, even as channels trend larger and more private.
Still, the episode highlights unresolved issues: channel jamming attacks have lacked a widely deployed fix for over seven years, new Lightning users often cannot receive payments without buying capacity from a service provider, and liquidity remains concentrated among a small number of professional operators.
What Comes Next
Boltz gave no timeline for restoring service as of August 4. Affected wallets are now searching for backup swap providers or building redundancy. The overlap with the Coldcard exploit has intensified fears that AI is becoming a force multiplier for attackers. Bitcoin.com News will continue to monitor updates from Boltz, alternative providers, and whether other small teams follow Calderón’s warning that AI-driven attacks could force them offline too.
Source: https://news.bitcoin.com/crypto-news/ai-attack-freezes-boltz-rattles-lightning-network-users/