Non-custodial Bitcoin swap service Boltz disabled operations indefinitely after a series of automated attacks. The team said it contained several exploits over recent months, but attackers now test and adapt faster than developers can identify and patch weaknesses. Boltz reported that user funds were not lost, while refund and support channels remain available.

The decision matters because the service stopped before a catastrophic loss. In crypto, downtime is often treated as failure, giving teams an incentive to continue until the last possible moment. Boltz effectively concluded that temporary unavailability costs less than experimenting with real user funds under active attack.

AI changes attack economics. A human previously had to study an API, construct requests and interpret responses manually. An agent can scan continuously, modify sequences and use every failed attempt as information for the next one. For a small open-source team, defensive workload can grow much faster than headcount.

The second-order effect may reshape service architecture. Projects will need automated rate limits, deception systems, isolated execution environments and controls capable of closing a suspicious route without waiting for a human. Automated defense can also block legitimate users or become another failure point. Watch the Boltz technical report, restoration timeline, independent audit and whether a shared defensive layer emerges for smaller protocols. The team's statement that attackers now iterate faster may become the defining security problem of this cycle. The relevant competitive advantage will not be who writes the most features, but who can detect, contain and learn at machine speed without giving an automated system uncontrolled authority over user funds.