Boltz Bitcoin Cross-Chain Bridge Suspends Exchange Services Indefinitely
The non-custodial Bitcoin cross-chain bridge Boltz announced that its services will remain disabled until further notice.
The company stated that this is not in response to a single security incident, but rather due to ongoing automated AI-assisted attacks on its infrastructure over the past few months. Multiple exploits have been addressed, and while they were all contained, the speed of the attackers' iterations has exceeded the team's ability to patch vulnerabilities; recent attacks have accelerated, leading the team to believe that the asymmetric situation will not reverse in the short term. The API remains available for collaborative refunds, and unilateral refunds do not rely on its infrastructure. User funds have never been at risk due to the non-custodial design.
Exchanges related to the Lightning Network and Liquid have been interrupted, with alternative infrastructure providers benefiting from the situation, while wallet services relying on Boltz are under pressure.
Source: Public Information
ABAB AI Insight
As a non-custodial Bitcoin cross-layer exchange service, Boltz has long supported atomic swaps between the main chain, Lightning Network, and Liquid. Historical data shows that small open-source teams operating on publicly available code face ongoing security pressures.
Capital and development resources are shifting from reliance on a single small bridging service to more redundancy and alternatives, motivated by AI tools significantly lowering the barrier for attacks and accelerating vulnerability discovery. This is manifested in attackers iterating faster than defenders can patch, forcing the service to suspend indefinitely.
Similar cases can be seen in other open-source Bitcoin and DeFi infrastructures facing automated attacks. Currently, the Bitcoin layer two and cross-chain space is undergoing a paradigm shift in security, with control concentrating on projects that can continuously invest in defensive resources or adopt more modular designs.
This essentially represents a technological substitution: AI-assisted attacks have altered the balance of offense and defense for open-source services, as the mechanism of open code stacks allows attackers to quickly test and iterate, making it difficult for small teams to match resource investment.
ABAB News · Cognitive Law
AI enables attackers to iterate faster than manual patching
Non-custodial design protects users but struggles to protect the service itself
The security paradigm of open-source stacks is being redefined