Boltz has suspended its Bitcoin swap service after a collection of AI-assisted assaults precipitated losses for the bootstrapped five-person firm, with the shutdown introduced on August 3 and a brand new group of veteran Bitcoiners now getting ready to take over the undertaking.
The episode factors to a rising safety downside for small open-source crypto providers, the place automated attackers can transfer quicker than small groups can examine and patch vulnerabilities.
Boltz Suspended Swap After Repeated Assaults
Boltz mentioned attackers had focused its infrastructure with growing frequency, depth, and class over the previous a number of months. A number of assaults succeeded, however the firm careworn that its non-custodial design stored buyer funds out of attain.
“The whole lot of the chance was ours,” the crew mentioned, explaining that losses from the assaults led it to droop the service on August 3 to forestall additional injury. The corporate additionally mentioned its API remained obtainable for cooperative refunds, whereas unilateral refunds continued to work with out counting on Boltz infrastructure.
The choice adopted a troublesome interval for the service. On August 1, Boltz quickly disabled EVM swaps involving USDT, USDC, TBTC, WBTC, and RBTC whereas fixing a bug in its EVM integration. Lightning, Liquid, and on-chain BTC swaps had been nonetheless working at that time.
Earlier than that, it had confronted different points, together with downtime in June of its API and associated providers, in addition to the disabling of its USDT swaps on its .onion web site in April.
By August 3, nonetheless, Boltz mentioned the issue had turn out to be broader. The crew reported a “regular rise in automated, AI-assisted probing” and a number of other exploits, adopted by a pointy acceleration in assaults in the course of the days instantly earlier than the shutdown. After reviewing its personal safety scans, the corporate mentioned it couldn’t responsibly restart swaps whereas a number of teams seemed to be concentrating on its infrastructure.
Boltz later mentioned its five-person crew didn’t have the assets to face up to that stage of strain over the long run. The corporate now has a brand new path ahead. A gaggle of veteran Bitcoiners has supplied capital and engineering assets and agreed to take over Boltz.
Work on figuring out and fixing vulnerabilities has already began, though no timetable for the return of swaps was given. The incoming group has not but been named.
All three authentic founders, Kilian, Michael, and Karl, have stepped down and could have no formal function within the undertaking.
AI Is Altering Each Sides of Bitcoin Safety
Boltz’s expertise comes as different stories level to a wider use of AI in cryptocurrency-related safety work. On August 10, a report on North Korea-linked Kimsuky mentioned the group had established native AI environments utilizing instruments together with Ollama, GPT4AI, and Msty. Investigators mentioned the setup might assist with malware growth, doc evaluation, and different assault strategies.
A separate safety marketing campaign confirmed the opposite facet of the equation. Sixteen researchers used AI-assisted strategies to look at 390 Bitcoin-related open-source tasks and reported 4,962 software program points, together with 85 vital and 635 high-severity findings.
That distinction reveals AI can assist defenders look at code at a tempo that may be troublesome manually, however the identical instruments can provide attackers quicker methods to probe uncovered methods. Boltz’s founders mentioned that they had reached the purpose the place their crew couldn’t hold tempo.
The put up Non-Custodial Bitcoin Bridge Boltz Shuts Down After AI-Assisted Assaults appeared first on CryptoPotato.