Zeus Wallet took its infrastructure offline after a cyberattack, while the self-custodial Bitcoin (BTC) service said customer funds remained safe and no Lightning flaw was found.
Key Points:
- Zeus contained the attack within hours and kept its infrastructure offline for an audit.
- No customer funds were lost, and investigators found no Lightning node software vulnerability.
- Users with closed Lightning Service Provider channels are due replacement channels after services resume.
Zeus Cyberattack
The incident occurred Wednesday, and Cointelegraph reported Thursday that Zeus disabled its supporting systems while reviewing the breach before any services return, with the company offering no restoration schedule. Services remain unavailable.
In an Aug. 5 security update, founder Evan Kaloudis said, “We believe this incident was limited to ZEUS infrastructure,” adding that investigators found no Lightning software vulnerability and no customer funds were lost or remained at risk.
Kaloudis said the team mitigated the attack within hours and would issue replacement channels to customers whose Lightning Service Provider connections closed once the platform can process requests again. Zeus has not described the attack method.
Also Read: Mythos 5 Built Fake Identities To Fool A Human Code Reviewer
Bitcoin Wallet Risk
The distinction matters because self-custody protects control of private keys, but wallet providers may still operate supporting services that affect channel management, liquidity routing, swaps and app availability during an infrastructure failure. A shutdown can therefore interrupt access to features without giving the operator custody of customer balances, while recovery work proceeds without moving user-controlled keys.
The wallet remains offline. Zeus said the incident strengthens its case for trusted execution environments, or enclaves, and the Validating Lightning Signer project, which separates signing authority from potentially exposed infrastructure and limits damage if a server is compromised.
The breach followed Zeus' Aug. 3 decision to disable swaps after Boltz, a non-custodial Bitcoin swap provider, paused its platform until further notice, creating a second service disruption for Zeus users in the same week. Those events involved separate systems.
Read Next: Bitcoin Developers Find 85 Critical Bugs In 24-Hour AI Audit
