ZEUS Wallet has taken its infrastructure offline after mitigating a cybersecurity incident that occurred within the last few hours, with the company stating that no customer funds were lost or placed at risk during the attack. According to the latest reports from Huoxing Finance and Bitcoin News, the attack was contained within several hours but infrastructure will remain offline until a comprehensive systems audit is completed. Founder Evan Kaloudis confirmed in a company blog post that investigators currently believe the attack was limited to Zeus' own infrastructure, with no evidence found of a vulnerability in Lightning node software. The company has not disclosed how the attackers gained access, which systems were affected, or whether any data was exposed, leaving users with limited information about the severity of the breach. As per the official security update published August 6, 2026, the team is keeping services offline "out of an abundance of caution" while conducting a comprehensive audit of all systems.
While infrastructure remains unavailable, Zeus said customers whose Lightning Service Provider (LSP) channels were closed during the incident will receive replacement channels once services resume. The company has asked affected users to contact support through the help section of the Zeus mobile wallet, warning that response times may be longer than usual as support requests increase during the outage. No timeline has been provided for restoring operations, with the company treating the shutdown as a precaution while it reviews internal systems and confirms services can be restarted without creating further security risks. The distinction between wallet custody and supporting infrastructure is central to the incident, as customers may remain in control of their Bitcoin while still losing temporary access to routing, liquidity or payment services that depend on external systems. As per the latest update, affected users are being directed to reach out through the support email listed under the Help menu in the mobile app.
Kaloudis said the incident has reinforced Zeus' ongoing work on trusted execution environments, also known as enclaves, together with the Validating Lightning Signer (VLS) project. According to the company, the planned infrastructure design is intended to mitigate this category of attack. The Validating Lightning Signer project separates private-key signing from the Lightning node and checks transactions against predetermined policies before approving them, reducing the ability of a compromised node or server to authorize unauthorized transactions. Although Zeus described the incident as a cybersecurity attack, it did not disclose how the attackers gained access or whether any internal systems outside its infrastructure were affected. The company's upcoming architecture is designed to help mitigate similar incidents through these enhanced security measures, with Zeus pledging to provide further updates as the investigation progresses.
The Zeus incident highlights a critical distinction in Bitcoin self-custody: while users hold their own keys, many still rely on centralized infrastructure like Zeus' Olympus LSP to open Lightning channels. This LSP layer is separate from the underlying Lightning Network protocol, meaning an outage can disrupt users even when their coins remain safe. The incident serves as a reminder that "self-custodial" doesn't always mean zero dependence on a provider's servers. The closure of LSP channels may limit users' ability to send or receive Lightning payments until replacement channels are established, demonstrating the operational risks users face when service providers take routing systems offline. This distinction is particularly important as the Bitcoin ecosystem continues to evolve with new security challenges and infrastructure dependencies.
The cybersecurity incident follows Zeus' announcement on Monday that it would disable swap services after Boltz halted operations. Boltz provides non-custodial Bitcoin swaps and said its platform would remain unavailable until further notice. Swaps allow users to move funds between on-chain Bitcoin and the Lightning Network without relying on conventional cryptocurrency exchanges. The two shutdowns were announced separately, with Zeus not indicating they are connected, though together they reduce the range of services currently available through the wallet. The restoration process will be closely watched as Zeus must balance speed against the risk of bringing systems back online before the source of the attack is fully understood, with a prolonged outage potentially disrupting users while an early restart could expose the company to another incident.
