Boltz is the non-custodial swap provider connecting Bitcoin mainchain, Lightning, and Liquid, used as backend infrastructure by ZEUS, Aqua, and Bull Bitcoin. On August 3 they pulled the plug on everything, not because of a breach, nobody lost funds since they never hold custody, but because they said months of AI-assisted probing had escalated to a pace their small team couldn’t keep patching against.
Their statement was blunt: “Attackers now iterate faster than a team our size can find and patch. This is not a response to a single incident.”
Three wallets lost swap functionality within hours with basically no warning. Blockstream announced Blockstream Swaps a week later, on August 10, clearly moving to fill the gap.
Worth being honest that this is Boltz’s own account, no independent technical report has been published yet, but the broader pattern lines up with other recent data points. Blockaid reported over a billion dollars lost to hacks in just the first half of 2026, already surpassing all of 2025. Coinbase scaled back its own bug bounty payouts because AI tooling flooded it with low quality duplicate submissions.
I also went back and checked the Coldcard vulnerability I covered a few weeks ago, the loss figure has climbed from 38 million to over 111 million since then. Not clear if that’s newly identified historical losses or ongoing exploitation, and I didn’t want to guess, so I flagged the uncertainty directly in the piece.
Full writeup connecting both stories:
https://davidebtc186.substack.com/p/ai-vs-ai-how-boltzs-shutdown-reveals
submitted by /u/Large-Cress900
[link] [comments]
