Bitcoin's cross-layer plumbing had one supplier, and the stand-in is still invite-only

Blockstream said on August 17 that Blockstream Swaps, a trustless way to move bitcoin between the main chain, the Lightning Network and the Liquid sidechain, has entered beta testing, roughly a week after Boltz suspended the swap service most wallets relied on for that job [s1c1][s1c2][s1c3]. Access is invite-only and general availability is undated [s1c4], which means the connective tissue between Bitcoin's three layers currently has no committed production replacement.

The mechanism is not exotic. An atomic swap is a trade in which neither party's assets sit with an intermediary: it either clears in full or collapses with both sides keeping what they started with [s1c5]. Blockstream's implementation uses the same primitive as Boltz's, leaning on hashed time-locked contracts [s1c6]. The company was already building Swaps before Boltz suspended its service, though it acknowledged the news created urgency internally [s1c7], and it said explicitly that it is "not seeking to replace any providers," describing the product instead as "a much-needed addition to improve redundancy and resilience to the ecosystem" [s1c8][s1c9]. Take that at face value: the firm most able to fill the hole is telling you it is not filling it.

Boltz attributed the indefinite suspension to waves of AI-assisted probing and several contained exploits, writing that "attackers now iterate faster than a team our size can find and patch" [s1c10][s1c11]. Note what did not happen. Boltz is self-custodial and never held user funds, so no customer coins were lost [s1c12], and DeFiLlama showed its total value locked at about $262,000 before the halt [s1c13]. The exposure was never balance-sheet size; it was availability. Contagion hit the wallets built on top of it, including Bull Bitcoin and Aqua Wallet [s1c14]. A dependency worth a quarter of a million dollars in locked value took swap functionality out of consumer wallets when it stopped answering.

The clustering is the other signal. ZEUS pulled its infrastructure offline on August 5 after a contained security incident, the third prominent Lightning operator to suspend services inside roughly 72 hours [s1c15]. That reads like a network failure and was not one: Amboss reported that during the week of the Boltz, Aqua and ZEUS disruptions, Lightning's public capacity rose by 28 BTC and public channels grew by 256 [s1c16]. The protocol held. The operators did not, and operators are where wallet teams have concentrated their integrations.

Behind it is a cost curve moving against small teams. a16z crypto found an off-the-shelf AI agent's success rate at exploiting known vulnerabilities jumped from 10% to 70% once it was given structured attack knowledge, a sevenfold improvement [s1c17][s1c18], and more than 40 Bitcoin firms have since asked frontier AI labs for vetted defender access to the models attackers already use [s1c19]. Small self-custodial service operators carry the full patching burden with none of the float that would fund a security team.

Watch three things. Whether Blockstream commits to a general availability date, given it also builds and maintains Liquid itself, the federated sidechain whose LBTC is a bitcoin-pegged asset [s1c20], which concentrates redundancy in the operator of one of the three layers. Whether wallets integrate more than one swap provider or self-host the primitive. And whether the frontier labs answer those 40-plus firms [s1c19].