Bitcoin Swap Services Hit by Sophisticated Attackers

Bitcoin swap services are facing increased pressure from attackers who can now test infrastructure at machine speed. The problem affects small open-source teams, which have to defend their systems without the resources of large exchanges like Coinbase and Kraken.

Boltz is a non-custodial service that allows users to move between Bitcoin layers, including mainchain Bitcoin, Lightning, and Liquid, without handing custody of their coins to an exchange. The company's own documentation describes its swaps as using hashed timelock contracts, which ensure that trades either complete or fail without giving one party a free option over the other.

However, attacks on similar services like Verus and B2 Network have shown that even with robust security measures in place, cross-chain systems can be vulnerable to exploitation. In July, CoinDesk reported that these two companies lost more than $35 million in several attacks within hours.

The absence of a confirmed Boltz shutdown should not make users shrug off the risk, but rather encourage them to check service status before swapping and keep rescue keys and refund data whenever a wallet hands it over. The pressure on small teams is real, and the economics of Bitcoin infrastructure don't always reward the teams doing the useful plumbing.