Audit log

Every state-changing event for Boltz Bitcoin Bridge: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-23 12:05:39Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   HsZtHxRHkKCs…ynp9xayFcopysha256 → base58

   verifying row…

   canonical bytes (20788 B) ▸

   {"actor":"system:backfill","investigation_id":"2b664b6f-b5d4-4fb4-9681-789b29bd7e8d","kind":"publish","page_slug":"boltz-bitcoin-bridge","published_at":"2026-08-23T12:05:39.712Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Boltz Bitcoin Bridge","sections":[{"content":"Boltz was conceived in 2018 by co-founder Kilian Rausch as a liquidity management tool for an early Lightning-based decentralized exchange called OpenDex. The mainnet launched in April 2019, initially facilitating swaps between the Bitcoin base chain and Lightning Network. In early 2023, co-founders Kilian Rausch and Michael formalized the project as a proper company and added Liquid Network support in May 2023. A third co-founder, Karl, was also part of the core team. Boltz described itself as a bootstrapped, five-person startup and self-funded throughout its operation. The platform's technical architecture relied on hash time-locked contracts (HTLCs) implementing atomic swaps, meaning users retained custody of their assets throughout the swap process. Boltz positioned itself as privacy-first infrastructure, requiring no KYC and offering no on-platform custody. According to Bitcoin Magazine coverage, the company operated some of the largest nodes on the Lightning Network.","heading":"Background and Operations","severity":"low","sources":[{"credibility":2,"name":"Between Bitcoin Layers: Boltz Builds Trustless Transfers — Bitcoin Magazine","type":"news_article","url":"https://bitcoinmagazine.com/business/between-bitcoin-layers-boltz-builds-trustless-transfers"},{"credibility":3,"name":"I'm Kilian, Co-Founder of Boltz. AMA — Stacker News","type":"other","url":"https://stacker.news/items/339204"},{"credibility":2,"name":"Boltz Exchange Becoming The Leading Bridge Across Bitcoin Layers — Bitcoin Magazine","type":"news_article","url":"https://bitcoinmagazine.com/business/boltz-exchange-becoming-the-leading-bridge-across-bitcoin-layers-via-holy-grail-technology"}]},{"content":"On August 3, 2026, Boltz suspended all swap services indefinitely, citing a sustained pattern of automated, AI-assisted attacks on its public codebase. The company stated: 'Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch.' Boltz attributed the attacks to 'what appear to be multiple resourceful groups' using automated AI tooling to scan its open-source code and generate novel exploit attempts at a pace that exceeded the team's capacity to respond. The company described the situation as 'a major paradigm shift for Bitcoin services operating on an open source stack' and warned users not to expect swap services to resume shortly. Because Boltz operated on a non-custodial HTLC model, user funds were never at direct risk; however, Boltz acknowledged that 'several' exploits succeeded against its own operational systems, with all losses absorbed by the company. No specific dollar figure for these operational losses was disclosed publicly. At the time of suspension, DeFiLlama reported approximately $262,000 in total value locked on the platform. Yan Pritzker, co-founder of Swan Bitcoin, publicly noted that 'AI attackers are getting more and more sophisticated and small teams are going to have a tough time keeping up with the attacks.'","heading":"AI-Assisted Exploitation and Service Suspension","severity":"high","sources":[{"credibility":2,"name":"This Bitcoin Bridge Shut Itself Down Because AI Was Finding Bugs Too Fast — Decrypt","type":"news_article","url":"https://decrypt.co/374933/bitcoin-bridge-shuts-down-ai-finding-bugs-too-fast"},{"credibility":2,"name":"Bitcoin bridge Boltz suspends services as AI hacks outpace patches — Protos","type":"news_article","url":"https://protos.com/bitcoin-bridge-boltz-suspends-services-as-ai-hacks-outpace-patches/"},{"credibility":2,"name":"Boltz Bridge shuts down swap services indefinitely after AI-powered exploits overwhelm its team — Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/boltz-bridge-shuts-down-ai-exploits/"},{"credibility":2,"name":"Boltz Shut Down Its Own Bitcoin Bridge After AI Attackers Outpaced Its Team — CoinPaprika","type":"news_article","url":"https://coinpaprika.com/news/boltz-shut-down-bitcoin-bridge-ai-attackers/"},{"credibility":1,"name":"Boltz official X announcement","type":"official","url":"https://x.com/Boltzhq/status/2087636521746674168"}]},{"content":"Boltz served as infrastructure for several Bitcoin wallets and services that relied on its swap functionality for Lightning Network and Liquid sidechain operations. Following the August 3, 2026 suspension, the wallets Aqua, Bull Bitcoin, and ZEUS lost Lightning swap functionality. Blockstream, whose Aqua wallet was among the affected services, subsequently launched a public beta of its own Blockstream Swaps product, enabling atomic swaps across Bitcoin, Liquid, and Lightning. Francis Pouliot of Bull Bitcoin publicly acknowledged the impact on his service while expressing gratitude toward the Boltz team. The shutdown highlighted a single-point-of-failure risk for smaller wallets and services that had not built redundancy into their swap provider arrangements.","heading":"Ecosystem Impact and Downstream Service Disruption","severity":"medium","sources":[{"credibility":2,"name":"AI Attack Freezes Boltz, Rattles Lightning Network Users — Bitcoin.com News","type":"news_article","url":"https://news.bitcoin.com/crypto-news/ai-attack-freezes-boltz-rattles-lightning-network-users/"},{"credibility":2,"name":"Blockstream launches swaps as Boltz stays offline over AI-assisted attacks — BSCN","type":"news_article","url":"https://bsc.news/news/blockstream-swaps-beta-boltz-ai-attacks"},{"credibility":2,"name":"Bitcoin bridge Boltz suspends services as AI hacks outpace patches — Protos","type":"news_article","url":"https://protos.com/bitcoin-bridge-boltz-suspends-services-as-ai-hacks-outpace-patches/"}]},{"content":"Boltz maintained a PGP-signed warrant canary that it committed to renewing every 60 days. The prior canary was dated May 31, 2026, setting a renewal deadline of July 30, 2026. Boltz suspended swaps on August 3 without having renewed the canary; the renewal did not appear until August 5, 2026 — six days past the stated deadline. Because Boltz's own canary text instructed readers to 'assume the worst' if it failed to renew on time, the gap triggered community speculation, including claims that the team may have been subject to government pressure or coercion. The renewed canary, when published on August 5, stated that Boltz had received 'zero requests for information of any kind by any third parties including but not limited to government agencies.' Francis Pouliot of Bull Bitcoin publicly stated he had been in continuous contact with the Boltz team throughout the shutdown and saw no evidence of coercion. No independent verification of government contact or absence thereof is available. The canary lapse appears, based on available evidence, to be a missed manual step during an organizational crisis, though this has not been formally adjudicated.","heading":"Warrant Canary Lapse and Government Coercion Speculation","severity":"medium","sources":[{"credibility":2,"name":"Did Bitcoin bridge Boltz silently warn of a government takeover? — Protos","type":"news_article","url":"https://protos.com/did-bitcoin-bridge-boltz-silently-warn-of-a-government-takeover/"},{"credibility":2,"name":"Did Bitcoin bridge Boltz silently warn of a government takeover? — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33254221/"},{"credibility":3,"name":"Francis Pouliot on X re: Boltz coercion claims","type":"social_media","url":"https://x.com/francispouliot_/status/2085207229565669458"}]},{"content":"On August 13, 2026, Boltz announced that all three original founders — Kilian Rausch, Michael, and Karl — had stepped down from the company effective immediately and would hold 'no further formal role at Boltz going forward.' The company announced that an unnamed group described only as 'veteran Bitcoiners' had agreed to take over the project, providing capital and engineering resources to pursue vulnerability remediation and a potential relaunch of swap services. Boltz stated the incoming operators' identities were being withheld for the time being and that they 'will introduce themselves on their own schedule.' As of August 21, 2026, no names, corporate details, or organizational background for the new operators had been publicly disclosed. The service remained offline with no announced relaunch date. The combination of service suspension, a missed warrant canary, an undisclosed operator transfer, and ongoing silence about operational losses represents a materially elevated uncertainty profile for prospective users.","heading":"Founder Exit and Undisclosed Ownership Transfer","severity":"high","sources":[{"credibility":2,"name":"Boltz Founders Exit as Unnamed Bitcoin Group Agrees to Take Over Suspended Swap Service — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33288731/"},{"credibility":2,"name":"Boltz Hands Over Control, But Won't Say Who's Taking It or How Much Was Lost — BitRss","type":"news_article","url":"https://bitrss.com/boltz-hands-over-control-but-won-t-say-who-s-taking-it-or-how-much-was-lost-240931"},{"credibility":2,"name":"Boltz Hands Over Control, But Won't Say Who's Taking It or How Much Was Lost — Cryip.co","type":"news_article","url":"https://cryip.co/boltz-founders-step-down-unnamed-group-takes-over/"}]},{"content":"The Boltz shutdown has been widely cited in crypto security commentary as a documented case of a service self-suspending specifically because AI-assisted vulnerability discovery outpaced human patching capacity. Ledger CTO Charles Guillemet was cited in contemporaneous coverage warning that AI enables vulnerability detection 'at machine speed.' TRM Labs reported that infrastructure compromises accounted for approximately 76% of crypto hack-related losses in the first half of 2026. CryptoSlate analysis argued that the episode illustrates a structural risk for small open-source teams maintaining publicly auditable codebases, potentially disadvantaging non-custodial services relative to larger custodial providers that can afford dedicated security teams. Anthropic's own reporting noted 832 banned accounts for AI-enabled cyber activity between March 2025 and 2026, establishing a documented pattern of AI tooling being applied to offensive security operations. The Boltz case is notable as the first publicly documented instance of a crypto service self-shutting down and attributing the decision specifically to AI-accelerated exploitation outpacing its patching velocity.","heading":"Broader Context: AI-Accelerated Exploitation of Open-Source Crypto Infrastructure","severity":"medium","sources":[{"credibility":2,"name":"Boltz's shutdown shows the real danger of AI hacking is pushing crypto back into the hands of giant custodians — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/boltzs-shutdown-shows-the-real-danger-of-ai-hacking-is-pushing-crypto-back-into-the-hands-of-giant-custodians/"},{"credibility":2,"name":"This Bitcoin Bridge Shut Itself Down Because AI Was Finding Bugs Too Fast — Decrypt","type":"news_article","url":"https://decrypt.co/374933/bitcoin-bridge-shuts-down-ai-finding-bugs-too-fast"},{"credibility":2,"name":"Bitcoin Bridge Halts All Swaps Indefinitely After AI Tools Outpace Security Fixes — The Daily Hodl","type":"news_article","url":"https://dailyhodl.com/2026/08/05/bitcoin-bridge-halts-all-swaps-indefinitely-after-ai-tools-outpace-security-fixes/"}]},{"content":"Multiple sources confirm that no user funds were lost as a result of the exploits or the service suspension. Boltz's atomic swap architecture using hash time-locked contracts ensured users retained custody of their assets until a swap was fully and successfully completed. At the time of suspension, the refund API remained available for cooperative refunds, and unilateral refund mechanisms continued to function independently of the swap service. Users with pending swaps at the time of suspension were instructed to use the refund API to recover their funds. The approximately $262,000 TVL figure reported by DeFiLlama at the time of suspension represents the value that was in-flight through the protocol's HTLC mechanisms, not funds held in custodial accounts.","heading":"User Fund Safety and Refund Mechanism","severity":"low","sources":[{"credibility":2,"name":"Bitcoin bridge Boltz suspends services as AI hacks outpace patches — Protos","type":"news_article","url":"https://protos.com/bitcoin-bridge-boltz-suspends-services-as-ai-hacks-outpace-patches/"},{"credibility":1,"name":"Boltz official X announcement","type":"official","url":"https://x.com/Boltzhq/status/2087636521746674168"},{"credibility":2,"name":"Non-Custodial Bitcoin Bridge Boltz Shuts Down After AI-Assisted Attacks — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/non-custodial-bitcoin-bridge-boltz-shuts-down-after-ai-assisted-attacks/"}]}],"sources_used":[{"credibility":2,"name":"This Bitcoin Bridge Shut Itself Down Because AI Was Finding Bugs Too Fast — Decrypt","type":"news_article","url":"https://decrypt.co/374933/bitcoin-bridge-shuts-down-ai-finding-bugs-too-fast"},{"credibility":2,"name":"Bitcoin bridge Boltz suspends services as AI hacks outpace patches — Protos","type":"news_article","url":"https://protos.com/bitcoin-bridge-boltz-suspends-services-as-ai-hacks-outpace-patches/"},{"credibility":2,"name":"Did Bitcoin bridge Boltz silently warn of a government takeover? — Protos","type":"news_article","url":"https://protos.com/did-bitcoin-bridge-boltz-silently-warn-of-a-government-takeover/"},{"credibility":2,"name":"Boltz Bridge shuts down swap services indefinitely after AI-powered exploits overwhelm its team — Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/boltz-bridge-shuts-down-ai-exploits/"},{"credibility":2,"name":"Boltz's shutdown shows the real danger of AI hacking — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/boltzs-shutdown-shows-the-real-danger-of-ai-hacking-is-pushing-crypto-back-into-the-hands-of-giant-custodians/"},{"credibility":2,"name":"Boltz Shut Down Its Own Bitcoin Bridge After AI Attackers Outpaced Its Team — CoinPaprika","type":"news_article","url":"https://coinpaprika.com/news/boltz-shut-down-bitcoin-bridge-ai-attackers/"},{"credibility":2,"name":"Boltz Founders Exit as Unnamed Bitcoin Group Agrees to Take Over — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33288731/"},{"credibility":2,"name":"Boltz Hands Over Control, But Won't Say Who's Taking It or How Much Was Lost — Cryip.co","type":"news_article","url":"https://cryip.co/boltz-founders-step-down-unnamed-group-takes-over/"},{"credibility":2,"name":"Boltz Hands Over Control, But Won't Say Who's Taking It or How Much Was Lost — BitRss","type":"news_article","url":"https://bitrss.com/boltz-hands-over-control-but-won-t-say-who-s-taking-it-or-how-much-was-lost-240931"},{"credibility":2,"name":"Bitcoin Bridge Halts All Swaps Indefinitely After AI Tools Outpace Security Fixes — The Daily Hodl","type":"news_article","url":"https://dailyhodl.com/2026/08/05/bitcoin-bridge-halts-all-swaps-indefinitely-after-ai-tools-outpace-security-fixes/"},{"credibility":2,"name":"Non-Custodial Bitcoin Bridge Boltz Shuts Down After AI-Assisted Attacks — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/non-custodial-bitcoin-bridge-boltz-shuts-down-after-ai-assisted-attacks/"},{"credibility":2,"name":"Blockstream launches swaps as Boltz stays offline over AI-assisted attacks — BSCN","type":"news_article","url":"https://bsc.news/news/blockstream-swaps-beta-boltz-ai-attacks"},{"credibility":2,"name":"AI Attack Freezes Boltz, Rattles Lightning Network Users — Bitcoin.com News","type":"news_article","url":"https://news.bitcoin.com/crypto-news/ai-attack-freezes-boltz-rattles-lightning-network-users/"},{"credibility":2,"name":"Boltz Bitcoin Bridge Shutdown: AI Hacks Force Exit — Shattered.io","type":"news_article","url":"https://shattered.io/boltz-bitcoin-bridge-ai-hack-shutdown-2026/"},{"credibility":2,"name":"Between Bitcoin Layers: Boltz Builds Trustless Transfers — Bitcoin Magazine","type":"news_article","url":"https://bitcoinmagazine.com/business/between-bitcoin-layers-boltz-builds-trustless-transfers"},{"credibility":3,"name":"I'm Kilian, Co-Founder of Boltz. AMA — Stacker News","type":"other","url":"https://stacker.news/items/339204"},{"credibility":1,"name":"Boltz official X announcement (service suspension)","type":"official","url":"https://x.com/Boltzhq/status/2087636521746674168"},{"credibility":3,"name":"Francis Pouliot (Bull Bitcoin) on X re: Boltz coercion claims","type":"social_media","url":"https://x.com/francispouliot_/status/2085207229565669458"},{"credibility":2,"name":"Boltz TVL Stats — DeFiLlama","type":"on_chain","url":"https://defillama.com/protocol/boltz?denomination=USD"},{"credibility":2,"name":"Boltz Exchange Becoming The Leading Bridge Across Bitcoin Layers — Bitcoin Magazine","type":"news_article","url":"https://bitcoinmagazine.com/business/boltz-exchange-becoming-the-leading-bridge-across-bitcoin-layers-via-holy-grail-technology"}],"summary":"Boltz is a non-custodial, open-source Bitcoin bridge that enabled atomic swaps between the Bitcoin mainchain, Lightning Network, and Liquid sidechain. On August 3, 2026, Boltz suspended all swap operations indefinitely after sustained AI-assisted exploitation attacks reportedly outpaced the capacity of its small team to ship patches. No user funds were lost due to the platform's non-custodial HTLC design, but company operating funds were depleted by contained exploits, and the service remains offline as of August 21, 2026.","timeline":[{"date":"2018-01-01","event":"Concept for Boltz originated when co-founder Kilian Rausch identified a need for automated Lightning channel liquidity management while working on OpenDex.","source":"Bitcoin Magazine / Stacker News AMA","source_url":"https://stacker.news/items/339204"},{"date":"2019-04-01","event":"Boltz mainnet launched, facilitating atomic swaps between Bitcoin base chain and Lightning Network.","source":"Bitcoin Magazine","source_url":"https://bitcoinmagazine.com/business/boltz-exchange-becoming-the-leading-bridge-across-bitcoin-layers-via-holy-grail-technology"},{"date":"2023-05-01","event":"Boltz formally incorporated as a company; Liquid Network swaps added to the platform; service expanded beyond a side project.","source":"Bitcoin Magazine","source_url":"https://bitcoinmagazine.com/business/between-bitcoin-layers-boltz-builds-trustless-transfers"},{"date":"2026-05-31","event":"Boltz published a PGP-signed warrant canary with a 60-day renewal commitment, setting a renewal deadline of July 30, 2026.","source":"Protos","source_url":"https://protos.com/did-bitcoin-bridge-boltz-silently-warn-of-a-government-takeover/"},{"date":"2026-07-30","event":"Boltz's 60-day warrant canary renewal deadline passed without renewal, triggering later community concern.","source":"Protos","source_url":"https://protos.com/did-bitcoin-bridge-boltz-silently-warn-of-a-government-takeover/"},{"date":"2026-08-03","event":"Boltz suspended all swap operations indefinitely, citing sustained AI-assisted exploitation by multiple groups outpacing the team's patching capacity. ~$262,000 TVL was in the protocol at the time of suspension.","source":"Decrypt","source_url":"https://decrypt.co/374933/bitcoin-bridge-shuts-down-ai-finding-bugs-too-fast"},{"date":"2026-08-05","event":"Boltz renewed its warrant canary, stating zero requests for information from any government agency had been received.","source":"Protos","source_url":"https://protos.com/did-bitcoin-bridge-boltz-silently-warn-of-a-government-takeover/"},{"date":"2026-08-13","event":"Boltz announced all three founders — Kilian Rausch, Michael, and Karl — had stepped down effective immediately. An unnamed group of 'veteran Bitcoiners' agreed to take over the project, providing capital and engineering resources.","source":"CryptoNews.net","source_url":"https://cryptonews.net/news/security/33288731/"},{"date":"2026-08-21","event":"Swap services remained offline with no announced relaunch date; new operators had not publicly identified themselves.","source":"Decrypt","source_url":"https://decrypt.co/374933/bitcoin-bridge-shuts-down-ai-finding-bugs-too-fast"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ff449325-9e64-41d1-88ed-22e637f2b333copy