Non-Custodial Bitcoin Bridge Boltz Shuts Down After AI-Assisted Attacks
Boltz has suspended its Bitcoin swap service after a collection of AI-assisted assaults induced losses for the bootstrapped five-person firm, with the shutdown introduced on August 3 and a brand new group of veteran Bitcoiners now getting ready to take over the undertaking.
The episode factors to a rising safety drawback for small open-source crypto companies, the place automated attackers can transfer sooner than small groups can examine and patch vulnerabilities.
Boltz Suspended Swap After Repeated Attacks
Boltz said attackers had focused its infrastructure with growing frequency, depth, and class over the previous a number of months. Several assaults succeeded, however the firm harassed that its non-custodial design saved buyer funds out of attain.
“The entirety of the danger was ours,” the group stated, explaining that losses from the assaults led it to droop the service on August 3 to stop additional harm. The firm additionally stated its API remained accessible for cooperative refunds, whereas unilateral refunds continued to work with out counting on Boltz infrastructure.
The resolution adopted a troublesome interval for the service. On August 1, Boltz briefly disabled EVM swaps involving USDT, USDC, TBTC, WBTC, and RBTC whereas fixing a bug in its EVM integration. Lightning, Liquid, and on-chain BTC swaps have been nonetheless working at that time.
Before that, it had confronted different points, together with downtime in June of its API and associated companies, in addition to the disabling of its USDT swaps on its .onion website in April.
By August 3, nonetheless, Boltz stated the issue had turn into broader. The group reported a “regular rise in automated, AI-assisted probing” and a number of other exploits, adopted by a pointy acceleration in assaults in the course of the days instantly earlier than the shutdown. After reviewing its personal safety scans, the corporate stated it couldn’t responsibly restart swaps whereas a number of teams gave the impression to be concentrating on its infrastructure.
Boltz later stated its five-person group didn’t have the sources to face up to that stage of strain over the long run. The firm now has a brand new path ahead. A gaggle of veteran Bitcoiners has offered capital and engineering sources and agreed to take over Boltz.
Work on figuring out and fixing vulnerabilities has already began, though no timetable for the return of swaps was given. The incoming group has not but been named.
All three unique founders, Kilian, Michael, and Karl, have stepped down and may have no formal function within the undertaking.
AI Is Changing Both Sides of Bitcoin Security
Boltz’s expertise comes as different reviews level to a wider use of AI in cryptocurrency-related safety work. On August 10, a report on North Korea-linked Kimsuky stated the group had established native AI environments utilizing instruments together with Ollama, GPT4AI, and Msty. Investigators stated the setup may assist with malware improvement, doc evaluation, and different assault methods.
A separate safety marketing campaign showed the opposite aspect of the equation. Sixteen researchers used AI-assisted strategies to look at 390 Bitcoin-related open-source initiatives and reported 4,962 software program points, together with 85 essential and 635 high-severity findings.
That distinction reveals AI may help defenders study code at a tempo that will be troublesome manually, however the identical instruments may give attackers sooner methods to probe uncovered techniques. Boltz’s founders stated they’d reached the purpose the place their group couldn’t hold tempo.
The publish Non-Custodial Bitcoin Bridge Boltz Shuts Down After AI-Assisted Attacks appeared first on CryptoPotato.
