Boltz Swap Services are currently unavailable until further notice.
We can't give an ETA as of this time, but will provide an update once we know more 🙏
Update: Boltz will stay disabled until further notice.
Our API remains available to process refunds cooperatively. In any case, unilateral refunds will work, as they do not depend on our infrastructure.
Support team stays reachable.
To be clear: this is not a response to a single incident. Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch. In the past few days alone we saw a drastic acceleration, and we do not believe this asymmetry will reverse. After reviewing the results of our own recent security scans, we cannot responsibly re-enable Boltz swaps, especially as we are being actively targeted by what appear to be multiple resourceful groups while we race to deploy fixes.
What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis. Do not expect swap services to resume shortly.
To be explicit: no user funds were ever at risk. Boltz is non-custodial by design. And as a fully bootstrapped company, the losses were ours alone.
2467We don't know yet how things will continue from here, but we'll keep you posted as soon as we have had the time to catch our breath and make a decision 🙏
Wow. This is surprising. I'm not sure how to interpret this. On the one hand, I don't see what incentive they have to make this up: they make money by operating, not pausing services. On the other hand, this seems weird, especially coming after the coldcard stuff, this seems weird.
Site still seems up??
They're up for refunds and shit. Try to run a swap through, it (probably) won't let you.
this explain why it failed yesterday