Evidence and risk■Verified evidence/▲Documented riskMaterial claims checked against current sources.; those sources document a material risk.
Last reviewedReviewed 5 Sep 2026KYC checked 5 Sep 2026 · unknown jurisdiction · Source → official siteHow to cite this pageSource coverageVerified evidenceRecorded riskDocumented risk
Evidence and facts
Evidence and facts
CUNICULA SCORE 4.0
17/100△Limited evidencePrivacy 12/25 · Control 0/20 · Transparency 0/20 · Security 0/25 · Accountability 5/10 · Cap 39 · Method
JURISDICTIONSV
INCIDENTService suspension and ownership handover after targeted attacks monitoring · high · since 2026-08-12 Boltz said AI-assisted attackers had targeted the service, suspended operations, and announced that all original founders stepped down. On 18 August the old crew still controlled the service and the handover remained in progress; no later provider-owned completion notice was found in the review window.Boltz suspension and founder departure, Boltz handover still in progress
AUDITED BYNo audit listed
OPERATOR DATAHosted operator recorded
SOURCE COVERAGE
■Verified evidenceTHIRD-PARTY REPORTED2/5Reviewed 5 Sep 2026 · Source → official site
LAST CHECKED2026-09-05
LAST UPDATED2026-09-05
Specs
DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 0/4
KYC TRIGGERSThe swap service is currently disabled. Previous no-account and swap terms are not evidence of present availability.
FEE0.1%
CATEGORIESSwap
COMMON USESLightning ↔ on-chain swaps, Liquid Bitcoin, Non-custodial workflows
FEATURESNon-custodial, No account required, Lightning ↔ On-chain, Liquid swaps, Open source, Submarine swaps, HTLC-based
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history
Analysis
OVERVIEW
Swaps between Lightning, on-chain Bitcoin, and Liquid settle through hash time-locked contracts, so the operator never takes custody and there is no account or deposit window to freeze.
LIMITS
Scope is movement between Bitcoin layers, not cross-asset privacy: both legs leave footprints that amount and timing correlation can connect, and Lightning routing has its own metadata.
USEFUL FOR
Moving value between Bitcoin layers without an account or custody exposure.
No identity verification is recorded for typical use. The swap service is currently disabled. Previous no-account and swap terms are not evidence of present availability.
Which payment methods are accepted?
Please check the provider site for accepted payment methods.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
No. The recorded jurisdiction is SV, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.
How are identity, operator, and evidence fields reported?
Identity exposure is level 0 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Source coverage is verified evidence, last reviewed 2026-09-05, and recorded risk is danger.
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.
Service history
Latest meaningful changes to the facts shown on this provider page.
Review overdue providers against current sources
Checked at, Fee, KYC last checked, Kyc note, and 6 more
Apply full-service rereview and score 4.0
Checked at, Last reviewed, Privacy warning, Source reviewed, and 4 more
Corporate registry information updated
Corporate / Entity type
Full service history
updated
Review overdue providers against current sources
Checked at
2026-08-25 → 2026-09-05
Fee
~0.1% → not set
KYC last checked
2026-06-22 → 2026-09-05
Kyc note
Fully non-custodial. Uses hash time-locked contracts - funds cannot be seized. → The swap service is currently disabled. Previous no-account and swap terms are not evidence of present availability.
Last reviewed
2026-02-24 → 2026-09-05
Privacy warning
Boltz announced a service suspension on 12 August 2026 after targeted attacks. All original founders stepped down, and as of 18 August the old crew still controlled the service while ownership handover remained in progress. Hold normal recommendation until the new operator and resumed service are confirmed by provider-owned sources. → Boltz swap services have been disabled since 3 August 2026 and remain disabled until further notice. The provider says its API remains available for cooperative refunds and unilateral refunds do not depend on its infrastructure. It reported repeated attacks and contained exploits, said no user funds were at risk, and did not give a reopening date.
not set → Outcome: HOLD; Checked at: 2026-08-25; Inputs: Operator data exposure: unknown; Control model: unknown; Source model: unknown; Audit: Score eligible: no; Reason: No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit.
empty → Boltz announced a service suspension on 12 August 2026 after targeted attacks. All original founders stepped down, and as of 18 August the old crew still controlled the service while ownership handover remained in progress. Hold normal recommendation until the new operator and resumed service are confirmed by provider-owned sources.
Source reviewed
official site → https://x.com/Boltzhq/status/2089675696494834097
Recorded risk
standard → danger
Score assessment
not set → Operator data exposure: limited; Control model: noncustodial-hosted; Source model: open
Non-custodial Bitcoin bridge - swap between Lightning, on-chain, and Liquid using atomic/submarine swaps. No account, no KYC, no custody. → Non-custodial Bitcoin bridge swapping between Lightning, on-chain and Liquid using submarine swaps.
Non-custodial Bitcoin bridge — swap between Lightning, on-chain, and Liquid using atomic/submarine swaps. No account, no KYC, no custody. → Non-custodial Bitcoin bridge - swap between Lightning, on-chain, and Liquid using atomic/submarine swaps. No account, no KYC, no custody.