The Lightning Network wallet ZEUS has temporarily taken its infrastructure offline following a sophisticated cybersecurity incident detected on August 6, 2026. According to an official statement from the development team, the attack was successfully mitigated within a few hours, and a comprehensive system audit is currently underway. The project emphasized that user funds remain safe and were never at risk during the intrusion, as the incident was localized to the provider's external infrastructure rather than the core wallet software.
Impact Assessment and Service Restoration
While the core functionality of the self-custodial wallet remains intact, certain centralized services provided by ZEUS, including its Lightning Service Provider (LSP) and swap capabilities, were impacted. The team decided to suspend operations at swaps.zeuslsp.com to prevent further exploitation while the security perimeter is reinforced.
- Fund Safety: All BTC balances and Lightning channel states are secure due to the non-custodial nature of the application.
- LSP Channels: Users whose channels were forced to close during the incident will receive replacement channels at no additional cost once services are fully restored.
- Software Integrity: Preliminary investigations confirmed that no vulnerabilities were found in the Lightning node software (LND/CLN) used by the wallet.
Fortifying Infrastructure with VLS and TEE
In response to the attack, ZEUS developers are accelerating the integration of advanced security protocols to protect against future threats. The team is currently fortifying its backend using Trusted Execution Environments (TEE) and the Validating Lightning Signer (VLS) project. VLS is designed to separate private keys from the routing node, enforcing strict protocol rules and policies before any transaction is signed, even if the underlying infrastructure is compromised.
Preliminary investigations indicate the incident was limited to ZEUS infrastructure. We are maintaining caution and conducting a full audit before restoring all services to ensure the highest level of security for our users.
The incident occurs amid a broader wave of automated, AI-assisted attacks targeting Bitcoin infrastructure providers. Earlier this week, the non-custodial bridge Boltz also reported similar service disruptions, highlighting an industry-wide trend of intensified probing of Lightning Network gateways. ZEUS has pledged to provide regular updates as the audit progresses and a definitive timeline for service restoration is established.
Frequently Asked Questions
Quick answers to the most common questions about this topic.