Blockstream has rolled out a new noncustodial swaps service, Blockstream Swaps, in beta shortly after leading swap provider Boltz halted its own operations amid a wave of automated, AI-assisted attacks and multiple contained exploits. The launch effectively introduces another option for moving bitcoin across different layers of the Bitcoin ecosystem at a time when infrastructure resilience is being tested.
According to Blockstream’s August 10 announcement, Blockstream Swaps is already live in a limited beta with selected participants. The company emphasized that the product had been in active development well before Boltz took its swap systems offline on August 3, but the shutdown prompted Blockstream to accelerate its roadmap. The goal is to make it easier and safer for users to shift value between Bitcoin mainnet, the Lightning Network and the Liquid sidechain without relying on custodial intermediaries.
Boltz’s decision to suspend services followed months of sustained attacks on its infrastructure. The team reported a rising volume of automated, AI-assisted attempts to probe and stress-test its systems, along with several exploits that, by its account, were contained before they could endanger customer funds. Nonetheless, the pace of adversarial innovation outstripped the small team’s ability to react.
“Attackers now iterate faster than a team our size can find and patch,” Boltz said in a statement cited by Blockstream. In other words, even though individual vulnerabilities were mitigated, the ongoing arms race made it increasingly difficult to operate the service safely in real time.
Boltz stressed that user funds were never in danger because of its self-custodial architecture. The design ensures that the service does not take control of users’ coins; instead, users remain in charge of their own keys throughout the swap process. Even after normal swap operations were suspended, refund mechanisms stayed active, allowing users to reclaim funds tied up in incomplete swaps.
Before the full shutdown, Boltz had already begun tightening its operations. On August 1, after discovering a bug in its Ethereum Virtual Machine integration, the provider restricted swaps involving several assets, including USDT, USDC, WBTC, TBTC and RBTC. At that stage, swaps between Bitcoin, Lightning and Liquid were still functioning. However, two days later, on August 3, the company decided to suspend all swap services, citing the unsustainable security pressure.
Blockstream positioned its new service as an internally run swaps layer focused on Lightning and Liquid, aimed especially at organizations that need robust, noncustodial liquidity management tools. Interested entities can request access to the beta program, while Blockstream continues to refine the feature set and security model.
The company noted that development of Blockstream Swaps was already “well into” the testing phase before Boltz went offline. The abrupt gap in the market reinforced Blockstream’s belief that the Bitcoin ecosystem needs multiple independent swap providers for redundancy. Still, Blockstream insisted that it is not attempting to push out or replace existing services.
“We are not seeking to replace any providers,” the company stated. “We see Blockstream Swaps as a much-needed addition to improve redundancy and resilience to the ecosystem.” The emphasis is on building overlapping infrastructure so that if one provider encounters issues, users are not left without critical interoperability tools.
Boltz previously served as a key backbone for several Bitcoin-focused applications. By enabling atomic swaps between Bitcoin mainnet, Lightning, and the Liquid sidechain, Boltz underpinned asset movement for services like Bull Bitcoin, Aqua and ZEUS. Its shutdown interrupted functionality across those platforms, illustrating how heavily integrated some projects had become with a single swap provider.
By introducing its own implementation, Blockstream gives its ecosystem-and potentially the wider Bitcoin space-another path for noncustodial swaps. Users do not have to surrender custody of their bitcoin to a middleman while converting between Bitcoin mainnet, Lightning channels, or Liquid’s LBTC. This aligns with Bitcoin’s broader ethos of minimizing trust in intermediaries and keeping users in control of their funds.
Blockstream highlighted that its swaps are particularly useful for users who hold BTC on Bitcoin mainnet or LBTC on Liquid but need to interact with Lightning applications. Instead of learning to manage complex Lightning channels and liquidity balancing, they can leverage swaps to enter or exit the Lightning Network while delegating operational complexity to the swap infrastructure.
At the core of the service is the atomic swap mechanism-a protocol-level technique that allows two parties to exchange assets without relying on a trusted third party to hold both sides of the trade. An atomic swap is structured so that either both legs of the transaction succeed, or both fail. If conditions for completion are not met, each participant retains or recovers their original funds.
Boltz’s existing implementation uses hashed time-locked contracts (HTLCs), a widely used primitive in Bitcoin and Lightning. Under this construction, one party generates a secret and publishes the cryptographic hash of that secret. Both halves of the swap are then locked to that same hash condition. When the recipient of one side reveals the secret to claim payment, the other party can use that same secret to complete the corresponding leg of the trade.
Timelocks act as a safety valve. If one side fails to claim within a specified period, the transaction path expires, and the locked funds can be refunded back to their original owners. This is how atomic swaps can be designed to be trustless yet resilient: no single party can unilaterally capture both sides of the trade, and timeouts provide a deterministic route to recovery.
Over time, Boltz upgraded its swap construction by adopting newer Bitcoin features such as Taproot and MuSig2. These additions allow cooperative transactions to be settled via a single, normal-looking key-path spend. That means that in the common case-where both sides cooperate-the resulting on-chain footprint is indistinguishable from a standard transaction, which improves privacy and efficiency. The more complex script path, which encodes the HTLC-like logic, remains available as a fallback when cooperation fails.
Different swap “directions” are handled through distinct swap types. A so-called submarine swap moves BTC or LBTC from a base layer (Bitcoin mainnet or Liquid) into Lightning channels, effectively turning on-chain coin into Lightning liquidity. A reverse submarine swap does the opposite, taking funds locked in Lightning and transferring them back onto Bitcoin or Liquid. A chain swap, meanwhile, enables value to move between BTC and LBTC directly-on-chain to sidechain or vice versa-without involving a custodial exchange.
Atomic swaps are not a new idea. They have been part of the Bitcoin developer conversation for years, and Blockstream has been involved in that domain since the early days of its Liquid sidechain. When Liquid launched in 2018, it introduced L-BTC, a bitcoin-pegged asset designed for faster settlements, confidential transactions, and other advanced features unavailable on the base layer. Swaps are a natural fit for such a multi-layer infrastructure, allowing liquidity to move where it is needed.
Beyond Blockstream Swaps, the company has also experimented with specialized swap protocols like LiquiDEX, which was crafted to enable decentralized, noncustodial trading of assets on Liquid. These efforts fit into a broader vision of building interoperable, layered Bitcoin infrastructure in which users can route value across different environments without resorting to centralized exchanges.
The current moment underscores why such redundancy matters. As more capital flows through noncustodial rails, the incentive to attack infrastructure providers grows. The Boltz episode shows that even well-designed, self-custodial services can be forced offline by a relentless barrage of probing and exploit attempts. In that context, having multiple independent providers-and multiple implementations-reduces single points of failure.
For users, these developments carry practical implications. Someone running a Lightning-enabled business, for instance, may need to rebalance channels, push liquidity from on-chain to off-chain, or withdraw customer funds from Lightning back to the main chain. Noncustodial swap services make it possible to manage such flows without trusted third parties and without learning the intricacies of channel management and routing.
At the same time, the arms race with attackers is likely to shape how future swap platforms are built. Expect more emphasis on modular architectures, formal security audits, and layered defenses that assume constant automated adversarial scanning. Rate limits, adaptive fee models, and probabilistic risk scoring may increasingly be built into swap services to prevent attackers from cheaply testing every edge case in real time.
Regulatory pressure could also intersect with this technical evolution. While atomic swaps are inherently peer-to-peer and noncustodial, regulators are paying closer attention to cross-chain and cross-layer bridges as potential conduits for illicit finance. Providers like Blockstream will be navigating not only technical risk but also legal and compliance uncertainty, especially if their services become integral to institutional workflows.
From a user-experience perspective, abstraction will be crucial. Most users do not need to understand HTLCs, Taproot trees, or MuSig2; they only need to know that a swap will either complete or their funds will safely return. Wallets and applications that integrate services like Blockstream Swaps can hide complexity behind simple flows such as “move funds to Lightning” or “withdraw to mainnet,” while still preserving noncustodial guarantees.
The Lightning Network itself stands to benefit from more robust, automated swap infrastructure. One of Lightning’s persistent challenges is liquidity provisioning: channels must be funded and rebalanced for payments to work smoothly. Swaps can serve as a powerful liquidity tool, and having multiple, redundant swap providers can make the network more resilient and easier to use for merchants, exchanges, and routing node operators.
Looking ahead, interoperability between different Bitcoin layers-and potentially even between Bitcoin and other networks-will likely rely on maturing swap technologies. Features like scriptless scripts, improved multi-signature schemes, and enhanced privacy tools could make future atomic swaps more efficient and harder to surveil, while also reducing the attack surface.
In that broader trajectory, Blockstream Swaps represents both a pragmatic response to an immediate gap left by Boltz and a continuation of a longer-term strategy: building resilient, noncustodial primitives that keep users in control. The incident with Boltz has highlighted the fragility that can emerge when too much infrastructure relies on a single provider. By bringing another audited, in-house swap solution into the mix, Blockstream aims to strengthen the redundancy and robustness of the Bitcoin, Lightning and Liquid ecosystem as a whole.