Update: Boltz will stay disabled until further notice.
Our API remains available to process refunds cooperatively. In any case, unilateral refunds will work, as they do not depend on our infrastructure.
Our support team stays reachable.
To be clear: this is not a response to a single incident. Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch. In the past few days alone we saw a drastic acceleration, and we do not believe this asymmetry will reverse. After reviewing the results of our own recent security scans, we cannot responsibly re-enable Boltz swaps, especially as we are being actively targeted by what appear to be multiple resourceful groups while we race to deploy fixes.
What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis. Do not expect swap services to resume shortly.
To be explicit: no user funds were ever at risk. Boltz is non-custodial by design. And as a fully bootstrapped company, the losses were ours alone.
We don't know yet how things will continue from here, but we'll keep you posted as soon as we have had the time to catch our breath and make a decision 🙏
i would like to say https://t.co/pdccjPoYaO. cuz RGB is the common sense of color. So the lanuchpad of color must be like projecting something into a screen, so use https://t.co/pdccjPoYaO is the best one. Also, project works as a noun too, so every launch is like a project of its own. And more importantly, we can create a new phase just like "pump it" mean launch a token on solana, under the context of RGB, we can say "project it".
We did it. Kaleidoswap executed the first RGB asset swap on Lightning mainnet. No testnet. Not a demo.
For the first time, an RGB20 stablecoin (tUSDT) was swapped trustlessly on Lightning, live on Bitcoin.
Full technical breakdown:
https://t.co/1efl824ayT