Boltz has suspended its Bitcoin swap service after a collection of AI-assisted assaults induced losses for the bootstrapped five-person firm, with the shutdown introduced on August 3 and a brand new group of veteran Bitcoiners now making ready to take over the undertaking.
The episode factors to a rising safety drawback for small open-source crypto companies, the place automated attackers can transfer sooner than small groups can examine and patch vulnerabilities.
Boltz Suspended Swap After Repeated Assaults
Boltz mentioned attackers had focused its infrastructure with growing frequency, depth, and class over the previous a number of months. A number of assaults succeeded, however the firm pressured that its non-custodial design saved buyer funds out of attain.
“The whole thing of the danger was ours,” the crew mentioned, explaining that losses from the assaults led it to droop the service on August 3 to forestall additional injury. The corporate additionally mentioned its API remained obtainable for cooperative refunds, whereas unilateral refunds continued to work with out counting on Boltz infrastructure.
The choice adopted a troublesome interval for the service. On August 1, Boltz quickly disabled EVM swaps involving USDT, USDC, TBTC, WBTC, and RBTC whereas fixing a bug in its EVM integration. Lightning, Liquid, and on-chain BTC swaps have been nonetheless working at that time.
Earlier than that, it had confronted different points, together with downtime in June of its API and associated companies, in addition to the disabling of its USDT swaps on its .onion web site in April.
By August 3, nonetheless, Boltz mentioned the issue had change into broader. The crew reported a “regular rise in automated, AI-assisted probing” and a number of other exploits, adopted by a pointy acceleration in assaults throughout the days instantly earlier than the shutdown. After reviewing its personal safety scans, the corporate mentioned it couldn’t responsibly restart swaps whereas a number of teams seemed to be concentrating on its infrastructure.
Boltz later mentioned its five-person crew didn’t have the assets to face up to that degree of stress over the long run. The corporate now has a brand new path ahead. A gaggle of veteran Bitcoiners has supplied capital and engineering assets and agreed to take over Boltz.
Work on figuring out and fixing vulnerabilities has already began, though no timetable for the return of swaps was given. The incoming group has not but been named.
All three authentic founders, Kilian, Michael, and Karl, have stepped down and could have no formal position within the undertaking.
AI Is Altering Each Sides of Bitcoin Safety
Boltz’s expertise comes as different stories level to a wider use of AI in cryptocurrency-related safety work. On August 10, a report on North Korea-linked Kimsuky mentioned the group had established native AI environments utilizing instruments together with Ollama, GPT4AI, and Msty. Investigators mentioned the setup might assist with malware growth, doc evaluation, and different assault strategies.
A separate safety marketing campaign confirmed the opposite aspect of the equation. Sixteen researchers used AI-assisted strategies to look at 390 Bitcoin-related open-source tasks and reported 4,962 software program points, together with 85 crucial and 635 high-severity findings.
That distinction reveals AI might help defenders study code at a tempo that might be troublesome manually, however the identical instruments may give attackers sooner methods to probe uncovered methods. Boltz’s founders mentioned that they had reached the purpose the place their crew couldn’t preserve tempo.
The submit Non-Custodial Bitcoin Bridge Boltz Shuts Down After AI-Assisted Assaults appeared first on CryptoPotato.