10 sats \ 0 replies \ @boltz OP 2 Apr \ parent \ on: @boltz's bio
As send to and receive from Lightning within Aqua is powered by Boltz, we are present in their Telegram group and are taking support requests there. But we are not admins.
20 sats \ 1 reply \ @boltz OP 8 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
We had one significant vulnerability pretty early on: https://blog.boltz.exchange/p/the-problem-with-free-options-69f9f59a2d48. But it was never user funds at risk. Just ours :/ Nothing in recent years.
Downtimes: many. Scroll through our twitter and you'll see the pain we went through. Mostly caused by either crashes of our LND e.g. https://nitter.net/Boltzhq/status/1666434127321522185 or planned restarts of our LND node to do the necessary db compaction. Most significant down time in recent history was back in May because we were unprepared for the fee hike see https://nitter.net/Boltzhq/status/1656013583124242437.
We have learned from this a ton, worked a lot to prevent both from causing significant down time again in the future (second CLN node as failover see #339248, also huge work went into automating our liquidity management) and things look a lot better now.
10 sats \ 0 replies \ @boltz OP 6 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
Good question, incredibly difficult topic. We spent many hours debating this in the last months as we grew. Let me try to be very transparent about the outcome:
What? We will "not facilitate swaps involving any of these bitcoin addresses: https://github.com/0xB10C/ofac-sanctioned-digital-currency-addresses/blob/lists/sanctioned_addresses_XBT.txt", 376 as of today. Not more, but also not less.
Why (Short version)? : Because we can't become a tool that is used for serious crime. If we do, we won't make it. And we really want to make it.
Why (Long version)?: Many of our users use Boltz Swaps to increase privacy for very legit use cases, e.g. when depositing or withdrawing from KYCed services like CEXes or as precaution when e.g. moving to cold storage. We will be blocked by these services, the same way many of these services freeze your account if you deposit from addresses that were involved in a mixer/coinjoin. It would render Boltz useless for many of users, while it would help exactly none because we didn't have a single swap involving an OFAC listed address in the past. And anyways most addresses on this list are emptied or otherwise dormant. Also, as we are driving integrations of our API forward, some partners simply require us to be "OFAC compliant" otherwise they can't integrate. Because they are based in the U.S. or otherwise. So far the rational arguments.
I chose to do the risky thing and be blunt. Would love to hear your point of view!
10 sats \ 0 replies \ @boltz OP 6 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
This. It's the only thing we have that is stable and battle-tested. Explorers, wallets (many more to come), dev tooling, even some exchange integrations. It's all there and ready, one just needs to use it. Goes without saying that many things can be improved and goes without saying we'll closely watch Fedi.
It's hard because we want to make these swaps taproot-native right from the beginning to avoid adding a swap type that will be obsolete just a month or two later. So taproot/musig2 is the big thing @michael1011 is currently working on. Liquid<>mainchain swaps itself are very similar to our submarine swaps.
PS: we'll move our existing submarine swaps to native taproot too ✌️
0 sats \ 1 reply \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
Write a song about it :D
10 sats \ 0 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
Become an LSP (https://github.com/BitcoinAndLightningLayerSpecs/lsp)? Potentially. We have it in our backlog but not a prio rn.
10 sats \ 3 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
Maybe with LN to onchain swaps coordinating with join market or on nostr (joinstr) with an equal output (or a few!) would be cool
Love it, wen github gist?
30 sats \ 0 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
🙏
11 sats \ 0 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
We didn't change anything on the site in the past days and definitely not in the last 40 mins. Can you spot what's different?
Regarding not working: I guess you are using LN -> Liquid swaps. So while I was here bragging about almost never running out of liquidity some big swappers came in and brutally emptied out our liquid wallet. We are refilling should be back in some mins. Just try again in a bit. I should watch my mouth.
111 sats \ 5 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
Definitely not this year. Honestly can't really promise anything and we still need to give it a proper look to decide how it will work. How it could work for the two different swap directions is outlined here, but as you can see Dan highlighted some issues https://gist.github.com/DanGould/425bde63ca13da238071a7935bb3ea3f
220 sats \ 1 reply \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
this is so cool! curious what would happen in a failed swap - if the user didn't download anything and accidentally closed the browser, then how can he prove that he is the one to refund to?
Welcome to our daily nightmare. First thing I want to say: we have a pretty good fix for this in testingn that will be released soon that should greatly motivate downloading the refund file and reduce these situations to a minimum. We'll hit the user with this in chain -> lightning swaps:
That being said, there is an emergency mechanism if all refund info was lost: here the user needs to extract the preimage directly from the invoice that was used in the swap and with this preimage, the user can craft the refund transaction. We usually help users to do that and have pretty much all custodial lightning services like WoS on speed dial to help the user get their preimage. But again this is quite some manual work, involves multiple rounds of communication and definitely sth we'd ideally not have to do anymore in 2024.
So far we are not aware of any loss of funds because of lost refund info.
104 sats \ 0 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
By reducing the attack surface. After careful evaluation we set up an entity in El Salvador, where we can operate legally as-is, and use it for very specific stuff only. But so far things are going well and are hopeful for El Salvador to become a safe haven for Bitcoin-only non-custodial services. We also moved our servers out of the cloud, don't use any service that is connected to the U.S. and generally make sure we stay as agile as we can.
20 sats \ 0 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
What would you say is the thing that played a bigger role in being integrated with many non-custodial LN wallets such as Breez and Phonex?
Would have loved to integrate with Phoenix, we actually talked to the team but they don't want 3rd party dependencies ("if Boltz goes down, part of the app stops working") which we totally understand. Phoenix is shooting for a very polished UX.
Was it the FOSS nature of the service? How easy it's to use? A combination of both and other things?
I think it's simply that we are the only production-grade non-custodial swap service that there is and additionally is not married to one specific lightning implementation and that has an open API.
What would you say is the hardest part of managing a service like this one?
In our case it's prbly the fact that we are a very small team and bootstrapped. We are proud of this fact but it doesn't make it easier and all of us need to "wear a lot of hats".
121 sats \ 0 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
🙏
255 sats \ 3 replies \ @boltz OP 5 Dec 2023 \ parent \ on: I'm Kilian, Co-Founder of Boltz. AMA. bitcoin
Hello Natalia, are you aware that this AMA is only happening because of you? So big THANK YOU for luring us onto Stacker News!
Re your questions:
- lockup failed
Don't remember if you told us already: but was the reason that you locked up too little e.g. the network fee was deducted from the amount by your wallet?
But I'm really curious how the refund works under the hood? how can it be so automatic 👀
Haha, a lot of magic happening. No but really: what is happening is that there is a "refund path" when you are locking up coins on the chain that can be used after the timeout blockheight if you know a set of secret information only you have. This info is stored in your browser as well as the refund file if you downloaded it. Here an example of what information a refund file contains:
{"id":"G8LwLT","asset":"BTC","privateKey":"f3ac710b058726ceeee17e7aebcbad64b4222b3aa02f14bbc027a50c34322308","redeemScript":"a914c8bd6f30ae123f70961fdeaaec471ced3f2efb9687632102c89b401b7902c000640f39c54e9a4fac2c5b7fbbc19a222f7f2a96955d0061c5670331c926b17521020e045994c22ce920d04418c517446fec0837e09467a0e31fadd09871966de53968ac","timeoutBlockHeight":2541873}
So what is concretely happening that our web app locally in your browser crafts and submits the refund transaction when you use https://boltz.exchange/refund.
Let me know if you want more depth on that