{"investigation":{"slug":"aztec-connect-deprecated-bridge-exploits-june-2026","entity_name":"Aztec Connect Deprecated Bridge Exploits (June 2026)","trust_score":4,"severity_base":null,"score_modifier":-1.4,"confidence":0.88,"status":"published","content_type":"investigation","summary":"In June 2026, attackers drained a combined total of roughly $4.25–4.4 million (reports differ) from two deprecated, immutable Aztec contracts on Ethereum within about four days. On June 14 the abandoned Aztec Connect rollup contract (deprecated March 2023) was drained of about $2.19 million through a mismatch between zk-proof verification and L1 settlement, followed by an approximately $88,000 residual drain on June 15; on June 17–18 the Aztec Private Rollup Bridge (closed around 2022) lost about $2.16–2.21 million through an unauthenticated escapeHatch() function. With admin keys renounced, no party could pause or patch the contracts and no funds were recovered; Aztec Labs and the Aztec Foundation said the current Aztec network and AZTEC ERC-20 token were unaffected.","sections":[{"content":"Aztec Connect was a privacy-focused zero-knowledge rollup bridge on Ethereum developed by Aztec Labs and launched in July 2022, allowing users to execute DeFi transactions without exposing details on-chain. Aztec Labs deprecated the product in March 2023, halting new deposits, and the off-chain sequencer was shut down in March 2024 (one account gives March 31, 2024). The on-chain contracts remained live and immutable. Accounts differ on when admin control was given up: one page states admin keys had already been renounced to preserve the protocol's privacy guarantees, another dates the renunciation to the March 2023 deprecation, and Aztec Labs' incident post states that all administrative roles and upgrade authority were renounced on-chain in April 2024, after about one year of advance notice to users. A separate, older product, the Aztec Private Rollup Bridge, was launched in 2021 and closed in 2022 according to most reports (one timeline gives 2022 as its approximate launch year; another account says it was sunset in 2021–2022); it too remained accessible and immutable on-chain. The Aztec Foundation described it as a 'Stage 2 rollup' deprecated in 2022. Both contracts continued to hold residual user funds, creating what security researchers described as 'ghost ship' vulnerabilities: deployed immutable code with no owner able to intervene. Both products are distinct from the current Aztec Network and its AZTEC ERC-20 token.","heading":"Background: Aztec Connect, the Private Rollup Bridge and Deprecation","sources":[{"url":"https://cryptobriefing.com/aztec-connect-exploit-deprecated-contract/","name":"Aztec Connect's abandoned smart contract exploited for $2M three years after shutdown — Crypto Briefing","type":"news_article","credibility":2},{"url":"https://thedefiant.io/news/hacks/aztec-connect-deprecated-contract-exploit-2-1m-zk-proof","name":"Aztec Connect Drained of $2.1M Through Deprecated Contract — The Defiant","type":"news_article","credibility":2},{"url":"https://aztec-labs.com/blog/aztec-connect-incident.html","name":"Aztec Connect Incident — Aztec Labs (official post-mortem)","type":"official","credibility":1},{"url":"https://www.cryptopolitan.com/aztec-labs-product-2-1m-exploit/","name":"Aztec Labs draws line with deprecated Aztec Connect product after $2.1M exploit — Cryptopolitan","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/06/18/aztec-networks-rollupprocessor-exploited-for-2-21-million/","name":"Aztec Network's RollupProcessor Exploited for $2.21 Million — Crypto Times","type":"news_article","credibility":2}],"severity":"high"},{"content":"At approximately 12:26 UTC on June 14, 2026, an attacker drained approximately $2.19 million from the deprecated Aztec Connect RollupProcessor (RollupProcessorV3) contract at 0xFF1F2B4ADb9dF6FC8eAFecDcbF96A2B351680455 in a single transaction. Assets taken included approximately 909 ETH (about $1.565–1.6 million), 270,513 DAI, 167.89 wstETH (about $357,000), and smaller amounts of LUSD, yvDAI, yvWETH and yvLUSD. The attacker executed 14 consecutive processRollup() calls in one atomic transaction: the first seven created unsupported L2 balances via forged deposits and the remaining seven withdrew those balances as real L1 assets. BlockSec flagged the transaction through its Phalcon monitoring system. Funds were routed through an intermediate attack contract (0x06f585...d0fcD) to the attacker's externally owned account 0x0F18D8b44a740272f0be4d08338d2b165b7EdD17, which had been initially funded via Tornado Cash. Reports differ on what happened to the funds next: SlowMist-based reporting said the stolen assets remained unmoved in the attacker's wallet as of June 15, while another account, citing the Aztec Labs post-mortem, describes them being moved through a chain of disposable wallets (0x7ec9...06db to 0xc431...c1f5 to 0x0af7...9912) and then to a high-volume service contract at 0xd90e...f31b. Because admin keys had been renounced, the contract could not be paused or patched during or after the attack.","heading":"First Exploit: Aztec Connect Rollup Contract (June 14, 2026)","sources":[{"url":"https://aztec-labs.com/blog/aztec-connect-incident.html","name":"Aztec Connect Incident — Aztec Labs (official post-mortem)","type":"official","credibility":1},{"url":"https://www.cryptotimes.io/2026/06/15/slowmist-details-root-cause-of-2-19m-aztec-connect-exploit/","name":"SlowMist Details Root Cause of $2.19M Aztec Connect Exploit — Crypto Times","type":"research","credibility":2},{"url":"https://slowmist.medium.com/analysis-of-the-2-19-million-asset-theft-from-aztec-connect-d867c59b1fc6","name":"Analysis of the $2.19 Million Asset Theft from Aztec Connect — SlowMist on Medium","type":"research","credibility":2},{"url":"https://www.kucoin.com/news/flash/aztec-connect-hacked-for-2-19m-via-zk-rollup-vulnerability","name":"Aztec Connect Hacked for $2.19M via ZK-Rollup Vulnerability — KuCoin","type":"news_article","credibility":2},{"url":"https://www.coininsider.com/news/attacker-drains-2-1-million-from-deprecated-aztec-connect-in-proof-verification-exploit/","name":"Attacker Drains $2.1 Million From Deprecated Aztec Connect in Proof Verification Exploit — CoinInsider","type":"news_article","credibility":2},{"url":"https://coinalertnews.com/news/2026/06/15/aztec-connect-exploit-2-million","name":"Aztec Connect Exploit Drains $2.1M from Deprecated Ethereum Bridge — CoinAlertNews","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/aztec-connects-depreciated-smart-contract-exploited-for-2-million","name":"Aztec Connect Exploited For $2.1 Million — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://thedefiant.io/news/hacks/aztec-connect-deprecated-contract-exploit-2-1m-zk-proof","name":"Aztec Connect Drained of $2.1M Through Deprecated Contract — The Defiant","type":"news_article","credibility":2},{"url":"https://cryptobriefing.com/aztec-connect-exploit-deprecated-contract/","name":"Aztec Connect's abandoned smart contract exploited for $2M three years after shutdown — Crypto Briefing","type":"news_article","credibility":2},{"url":"https://themerkle.com/attacker-drains-2-1-million-from-deprecated-aztec-connect-contracts-in-ethereum-exploit/","name":"Attacker Drains $2.1 Million From Deprecated Aztec Connect Contracts — The Merkle News","type":"news_article","credibility":2},{"url":"https://cryip.co/aztec-connect-exploit-drains-2-19m-from-deprecated-protocol-aztec-network-safe/","name":"Aztec Connect Exploit Drains $2.19M From Deprecated Protocol — Cryip","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Beginning at approximately 04:00 UTC on June 15, 2026, a second wave of 14 transactions using the same Aztec Connect vulnerability extracted approximately $88,000 in residual value from leftover DeFi bridge positions. It appears to have been carried out by a different actor taking advantage of funds remaining after the primary exploit; Aztec Labs described it as part of the same root cause. Together with the June 14 attack, total Aztec Connect losses were approximately $2.27 million.","heading":"Follow-on Residual Drain of Aztec Connect (June 15, 2026)","sources":[{"url":"https://aztec-labs.com/blog/aztec-connect-incident.html","name":"Aztec Connect Incident — Aztec Labs (official post-mortem)","type":"official","credibility":1},{"url":"https://coinalertnews.com/news/2026/06/15/aztec-connect-exploit-2-million","name":"Aztec Connect Exploit Drains $2.1M from Deprecated Ethereum Bridge — CoinAlertNews","type":"news_article","credibility":2}],"severity":"high"},{"content":"On June 17–18, 2026 (sources differ by one day), a second, unrelated attacker drained the deprecated Aztec Private Rollup Bridge's RollupProcessor contract at 0x737901bea3eeb88459df9ef1be8ff3ae1b42a2ba. Reports differ on the amount: approximately $2.21 million according to Crypto Times, approximately $2.16–2.165 million according to Coinpedia, TronWeekly and CoinLaw, and $2.15 million according to CoinPaper. Assets taken were 1,158 ETH, 150,000 DAI and about 0.47 renBTC (0.4696 renBTC), across three rapid transactions according to one account. The vector was the escapeHatch() function, an emergency withdrawal mechanism that lacked access control: no onlyOwner restriction, no rollup-provider authorization and no signature verification. When rollupSize was set to zero, the TurboVerifier contract accepted the escape-hatch proof and processed withdrawals based on caller-supplied inputs (asset ID, recipient, amount, or crafted proofId and publicOutput parameters) without independently verifying fund ownership. The attacker's EOA, reported in truncated form as 0x6952...8e97f and 0x695...78e97f, had been funded with 0.134 ETH from the HitBTC exchange. CertiK confirmed the incident, and SlowMist and BlockSec published analyses. Protos reported it as the 14th bridge-related exploit of 2026.","heading":"Second Exploit: Aztec Private Rollup Bridge escapeHatch (June 17–18, 2026)","sources":[{"url":"https://www.cryptotimes.io/2026/06/18/aztec-networks-rollupprocessor-exploited-for-2-21-million/","name":"Aztec Network's RollupProcessor Exploited for $2.21 Million — Crypto Times","type":"news_article","credibility":2},{"url":"https://coinpedia.org/news/aztec-hit-again-another-2-16-million-drained-just-days-after-previous-exploit","name":"Aztec Hit Again: Another $2.16 Million Drained Just Days After Previous Exploit — Coinpedia","type":"news_article","credibility":2},{"url":"https://ambcrypto.com/aztec-network-attacked-twice-in-3-days-hacker-drains-2-21m-in-digital-assets/","name":"Aztec Network attacked twice in 3 days — AMBCrypto","type":"news_article","credibility":2},{"url":"https://cryip.co/aztec-private-rollup-bridge-hit-again-2-2m-exploit/","name":"Aztec Private Rollup Bridge Hit Again as Attackers Drain $2.2 Million — Cryip","type":"news_article","credibility":2},{"url":"https://protos.com/aztec-network-hit-by-second-hack-this-week-as-escapehatch-drained-of-2m/","name":"Aztec Network hit by second hack this week as escapeHatch drained of $2M — Protos","type":"news_article","credibility":2},{"url":"https://www.tronweekly.com/aztec-network-exploit-2-16m-drained-from/","name":"Aztec Network Exploit: $2.16M Drained From Deprecated Bridge — TronWeekly","type":"news_article","credibility":2},{"url":"https://coinlaw.io/aztec-second-2-1m-hack-private-rollup-bridge/","name":"Aztec Hit by Second $2.1M Hack in Days as Bridge Drained — CoinLaw","type":"news_article","credibility":2},{"url":"https://coinpaper.com/32030/aztec-suffers-second-215m-exploit-in-less-than-a-week","name":"Aztec Suffers Second $2.15M Exploit in Less Than a Week — CoinPaper","type":"news_article","credibility":2},{"url":"https://x.com/aztecFND/status/2067511967237939636","name":"Aztec Foundation official statement on June 17 exploit — X (Twitter)","type":"official","credibility":1}],"severity":"critical"},{"content":"BlockSec, SlowMist, CertiK and Halborn analysed the attacks; BlockSec characterised both as the same vulnerability class, a 'public input binding issue' in zero-knowledge proof verification. For Aztec Connect, SlowMist described a settlement-boundary mismatch: the zk-SNARK proof committed to 32 public input slots, but the L1 settlement loop processed only the numRealTxs rows set by the attacker, so forged deposits in the remaining slots were accepted by the rollup while invisible to L1 validation; the circuit lacked constraints on unused slots. Aztec Labs' post-mortem gives the concrete form: rollups were submitted with numRealTxs=1 but 2 rows, so the proof validated both rows while settlement processed only row 0, and row 1 deposits created internal balances without collecting real funds, which were then withdrawn. CertiK added that computeRootHashes() checked only the start of the proof data, leaving token transfer parameters in the middle unverified. Aztec Labs noted that the zk-proof cryptography itself was not compromised; the flaw lay in how settlement code interacted with verified proofs. For the Private Rollup Bridge, SlowMist attributed the loss to weak escape-hatch checks that allowed withdrawal proof data to be manipulated. Neither exploit involved private-key compromise or reentrancy; both relied on logic flaws that predated deprecation.","heading":"Technical Root Cause: Public Input Binding Flaws","sources":[{"url":"https://aztec-labs.com/blog/aztec-connect-incident.html","name":"Aztec Connect Incident — Aztec Labs (official post-mortem)","type":"official","credibility":1},{"url":"https://slowmist.medium.com/analysis-of-the-2-19-million-asset-theft-from-aztec-connect-d867c59b1fc6","name":"Analysis of the $2.19 Million Asset Theft from Aztec Connect — SlowMist on Medium","type":"research","credibility":2},{"url":"https://www.cryptotimes.io/2026/06/15/slowmist-details-root-cause-of-2-19m-aztec-connect-exploit/","name":"SlowMist Details Root Cause of $2.19M Aztec Connect Exploit — Crypto Times","type":"research","credibility":2},{"url":"https://www.halborn.com/blog/post/explained-the-aztec-connect-hack-june-2026","name":"Explained: The Aztec Connect Hack (June 2026) — Halborn Security","type":"research","credibility":2},{"url":"https://www.kucoin.com/news/flash/aztec-connect-hacked-for-2-19m-via-zk-rollup-vulnerability","name":"Aztec Connect Hacked for $2.19M via ZK-Rollup Vulnerability — KuCoin","type":"news_article","credibility":2},{"url":"https://protos.com/aztec-network-hit-by-second-hack-this-week-as-escapehatch-drained-of-2m/","name":"Aztec Network hit by second hack this week as escapeHatch drained of $2M — Protos","type":"news_article","credibility":2},{"url":"https://dev.to/cryip/how-a-single-validation-mismatch-can-drain-millions-lessons-from-the-aztec-connect-exploit-2598","name":"How a Single Validation Mismatch Can Drain Millions — DEV Community / Cryip","type":"research","credibility":3}],"severity":"critical"},{"content":"After the first exploit, the Aztec Foundation posted on X: 'The Aztec Foundation was made aware of a potential exploit targeting Aztec Connect which occurred earlier today, June 14, 2026. There are no links between this product and any smart contracts related to the AZTEC ERC20 token, or current Aztec network.' Aztec Labs published an incident post stating: 'Aztec Connect was deprecated 3 years ago. Aztec Labs holds no admin keys or control over the system; it cannot be paused or upgraded by us.' After the second exploit the Foundation stated: 'The Aztec Foundation was made aware of a potential exploit targeting a deprecated product which occurred on June 17, 2026. There are no links between this product and any smart contracts related to the current network or the AZTEC ERC20 token. The product was deprecated 4 years ago.' Aztec Labs said renouncing administrative access had been an intentional choice for decentralization and user privacy, but acknowledged it made patching or pausing impossible. No recovery mechanism was available and no funds were recovered. The AZTEC token rose about 5% after the first disclosure and fell about 1.6% after the second.","heading":"Aztec Labs and Aztec Foundation Response","sources":[{"url":"https://x.com/aztecFND/status/2066175938887619055","name":"Aztec Foundation on X — official statement June 14, 2026","type":"official","credibility":1},{"url":"https://x.com/aztecFND/status/2067511967237939636","name":"Aztec Foundation official statement on June 17 exploit — X (Twitter)","type":"official","credibility":1},{"url":"https://aztec-labs.com/blog/aztec-connect-incident.html","name":"Aztec Connect Incident — Aztec Labs (official post-mortem)","type":"official","credibility":1},{"url":"https://www.cryptopolitan.com/aztec-labs-product-2-1m-exploit/","name":"Aztec Labs draws line with deprecated Aztec Connect product after $2.1M exploit — Cryptopolitan","type":"news_article","credibility":2},{"url":"https://coinjournal.net/news/aztec-network-loses-over-4-million-in-three-days-to-two-subsequent-hacks/","name":"Aztec Network loses over $4 million in three days to two subsequent hacks — CoinJournal","type":"news_article","credibility":2},{"url":"https://www.tronweekly.com/aztec-network-exploit-2-16m-drained-from/","name":"Aztec Network Exploit: $2.16M Drained From Deprecated Bridge — TronWeekly","type":"news_article","credibility":2}],"severity":"medium"},{"content":"Aztec Labs and the Aztec Foundation said neither the current Aztec Network nor the AZTEC ERC-20 token is connected to, or was affected by, the exploited contracts, and independent security and news sources reported the same. The current network, which focuses on private smart contracts, uses separate infrastructure. No operational disruption to it was reported. Users who had withdrawn from the deprecated products before the exploits were unaffected; losses fell on legacy users who had not withdrawn before the contracts became immutable.","heading":"Scope: Current Aztec Network","sources":[{"url":"https://aztec-labs.com/blog/aztec-connect-incident.html","name":"Aztec Connect Incident — Aztec Labs (official post-mortem)","type":"official","credibility":1},{"url":"https://nulltx.com/aztec-exploited-twice-in-three-days-as-attackers-drain-over-4m/","name":"Aztec Exploited Twice in Three Days as Attackers Drain Over $4M — NullTX","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/legacy-aztec-contracts-drained-4m-in-zk-proof-exploits-active-network-unscathed","name":"Legacy Aztec Contracts Drained $4M in ZK-Proof Exploits — Active Network Unscathed — KuCoin","type":"news_article","credibility":2},{"url":"https://www.namecoinnews.com/aztec-private-rollup-bridge-loses-2-16m/","name":"Aztec Network's Private Rollup Bridge Exploited for $2.16M — NamecoinNews","type":"news_article","credibility":2}],"severity":"low"},{"content":"Reports differ on the combined loss: approximately $4.25 million according to CoinJournal, over $4.3 million or $4.3–4.4 million in other accounts, and 'over $4 million' in headlines. The incidents illustrate the 'ghost ship' problem: immutable contracts holding user funds persist after a product shuts down, and with admin keys renounced no one can pause, upgrade or drain them to safety. More than two years passed between the halt of Aztec Connect deposits and the exploit, during which the contract held residual funds without active monitoring. Security practitioners have said a proper wind-down should move all residual funds to user-controlled addresses before renouncing admin keys, or keep timelocked emergency mechanisms that survive shutdown; this was apparently not fully done for either Aztec product. The second exploit, days after the first and against a structurally similar contract, suggests the first may have prompted others to probe adjacent legacy Aztec contracts.","heading":"Combined Losses and Systemic Risk of Immutable Legacy Contracts","sources":[{"url":"https://coinjournal.net/news/aztec-network-loses-over-4-million-in-three-days-to-two-subsequent-hacks/","name":"Aztec Network loses over $4 million in three days to two subsequent hacks — CoinJournal","type":"news_article","credibility":2},{"url":"https://cryptobriefing.com/aztec-connect-exploit-deprecated-contract/","name":"Aztec Connect's abandoned smart contract exploited for $2M three years after shutdown — Crypto Briefing","type":"news_article","credibility":2},{"url":"https://nulltx.com/aztec-exploited-twice-in-three-days-as-attackers-drain-over-4m/","name":"Aztec Exploited Twice in Three Days as Attackers Drain Over $4M — NullTX","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/legacy-aztec-contracts-drained-4m-in-zk-proof-exploits-active-network-unscathed","name":"Legacy Aztec Contracts Drained $4M in ZK-Proof Exploits — Active Network Unscathed — KuCoin","type":"news_article","credibility":2},{"url":"https://dev.to/cryip/how-a-single-validation-mismatch-can-drain-millions-lessons-from-the-aztec-connect-exploit-2598","name":"How a Single Validation Mismatch Can Drain Millions — DEV Community / Cryip","type":"research","credibility":3},{"url":"https://protos.com/aztec-network-hit-by-second-hack-this-week-as-escapehatch-drained-of-2m/","name":"Aztec Network hit by second hack this week as escapeHatch drained of $2M — Protos","type":"news_article","credibility":2},{"url":"https://coinpaper.com/32030/aztec-suffers-second-215m-exploit-in-less-than-a-week","name":"Aztec Suffers Second $2.15M Exploit in Less Than a Week — CoinPaper","type":"news_article","credibility":2},{"url":"https://coinpedia.org/news/aztec-hit-again-another-2-16-million-drained-just-days-after-previous-exploit","name":"Aztec Hit Again: Another $2.16 Million Drained Just Days After Previous Exploit — Coinpedia","type":"news_article","credibility":2}],"severity":"high"},{"content":"CoinTelegraph and Crypto Briefing reported that about $44 million was stolen across several protocols in this period, including an alleged $30 million loss at Humanity Protocol and an $8 million compromise of the Syscoin Bridge. Protos reported that cumulative losses across 2026 bridge hacks exceeded $340 million at the time of its report.","heading":"Broader June 2026 Hack Context","sources":[{"url":"https://cointelegraph.com/news/aztec-connects-depreciated-smart-contract-exploited-for-2-million","name":"Aztec Connect Exploited For $2.1 Million — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://coinjournal.net/news/aztec-network-loses-over-4-million-in-three-days-to-two-subsequent-hacks/","name":"Aztec Network loses over $4 million in three days to two subsequent hacks — CoinJournal","type":"news_article","credibility":2},{"url":"https://protos.com/aztec-network-hit-by-second-hack-this-week-as-escapehatch-drained-of-2m/","name":"Aztec Network hit by second hack this week as escapeHatch drained of $2M — Protos","type":"news_article","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2021","event":"Aztec Private Rollup Bridge launches on Ethereum mainnet (one page gives 2022 as an approximate launch year).","source":"Coinpedia / AMBCrypto","source_url":"https://coinpedia.org/news/aztec-hit-again-another-2-16-million-drained-just-days-after-previous-exploit"},{"date":"2022","event":"Aztec Private Rollup Bridge closed; contracts remain live and immutable on-chain.","source":"Crypto Times","source_url":"https://www.cryptotimes.io/2026/06/18/aztec-networks-rollupprocessor-exploited-for-2-21-million/"},{"date":"2022-07","event":"Aztec Connect launches as a privacy-focused zk-rollup bridge on Ethereum.","source":"Crypto Briefing","source_url":"https://cryptobriefing.com/aztec-connect-exploit-deprecated-contract/"},{"date":"2023-03","event":"Aztec Labs deprecates Aztec Connect, halting new deposits; the contract remains on-chain.","source":"Cryptopolitan / Crypto Briefing","source_url":"https://www.cryptopolitan.com/aztec-labs-product-2-1m-exploit/"},{"date":"2024-03","event":"Aztec Connect off-chain sequencer shut down; the on-chain RollupProcessor continues to hold residual user funds.","source":"Cryptopolitan / Crypto Briefing","source_url":"https://www.cryptopolitan.com/aztec-labs-product-2-1m-exploit/"},{"date":"2024-04","event":"Aztec Labs renounces all admin roles and upgrade authority over Aztec Connect contracts on-chain, per its incident post.","source":"Aztec Labs official post-mortem","source_url":"https://aztec-labs.com/blog/aztec-connect-incident.html"},{"date":"2026-06","event":"June 14, ~12:26 UTC: attacker (EOA 0x0F18D8b44a740272f0be4d08338d2b165b7EdD17, funded via Tornado Cash) drains about $2.19M from the Aztec Connect rollup contract via 14 processRollup() calls in one transaction.","source":"SlowMist via Crypto Times; Aztec Labs post-mortem","source_url":"https://www.cryptotimes.io/2026/06/15/slowmist-details-root-cause-of-2-19m-aztec-connect-exploit/"},{"date":"2026-06","event":"June 14: Aztec Foundation statement on X disavowing any link to the current network or AZTEC token.","source":"Aztec Foundation on X","source_url":"https://x.com/aztecFND/status/2066175938887619055"},{"date":"2026-06","event":"June 15, from ~04:00 UTC: a second wave of 14 transactions drains about $88,000 in residual funds from Aztec Connect, bringing its losses to about $2.27M.","source":"Aztec Labs official post-mortem","source_url":"https://aztec-labs.com/blog/aztec-connect-incident.html"},{"date":"2026-06","event":"June 15: BlockSec, CertiK and SlowMist publish analyses of the first exploit; Aztec Labs publishes its incident post.","source":"Crypto Times / Aztec Labs","source_url":"https://www.cryptotimes.io/2026/06/15/slowmist-details-root-cause-of-2-19m-aztec-connect-exploit/"},{"date":"2026-06","event":"June 17–18: second attacker drains about $2.16–2.21M (1,158 ETH, 150,000 DAI, ~0.47 renBTC) from the Aztec Private Rollup Bridge RollupProcessor via the unauthenticated escapeHatch() function.","source":"Crypto Times / Protos / Coinpedia","source_url":"https://www.cryptotimes.io/2026/06/18/aztec-networks-rollupprocessor-exploited-for-2-21-million/"},{"date":"2026-06","event":"June 17: Aztec Foundation issues a second statement on X calling the product deprecated four years earlier and unrelated to the current network.","source":"Aztec Foundation on X","source_url":"https://x.com/aztecFND/status/2067511967237939636"},{"date":"2026-06","event":"June 18: combined losses reported at about $4.25M or more; no funds recovered; AZTEC token falls about 1.6%.","source":"CoinJournal / Coinpedia","source_url":"https://coinjournal.net/news/aztec-network-loses-over-4-million-in-three-days-to-two-subsequent-hacks/"}],"sources_used":[{"url":"https://x.com/aztecFND/status/2066175938887619055","name":"Aztec Foundation on X — official statement June 14, 2026","type":"official","archive_url":null,"credibility":1,"archive_timestamp":null},{"url":"https://slowmist.medium.com/analysis-of-the-2-19-million-asset-theft-from-aztec-connect-d867c59b1fc6","name":"Analysis of the $2.19 Million Asset Theft from Aztec Connect — SlowMist on Medium","type":"research","archive_url":"http://web.archive.org/web/20260719145158/https://slowmist.medium.com/analysis-of-the-2-19-million-asset-theft-from-aztec-connect-d867c59b1fc6","credibility":2,"archive_timestamp":"2026-07-19T14:51:58+00:00"},{"url":"https://www.cryptotimes.io/2026/06/15/slowmist-details-root-cause-of-2-19m-aztec-connect-exploit/","name":"SlowMist Details Root Cause of $2.19M Aztec Connect Exploit — Crypto Times","type":"research","archive_url":"https://web.archive.org/web/20260728015426/https://www.cryptotimes.io/2026/06/15/slowmist-details-root-cause-of-2-19m-aztec-connect-exploit/","credibility":2,"archive_timestamp":"2026-07-28T01:54:26+00:00"},{"url":"https://www.cryptotimes.io/2026/06/18/aztec-networks-rollupprocessor-exploited-for-2-21-million/","name":"Aztec Network's RollupProcessor Exploited for $2.21 Million — Crypto Times","type":"news_article","archive_url":"https://web.archive.org/web/20260728111841/https://www.cryptotimes.io/2026/06/18/aztec-networks-rollupprocessor-exploited-for-2-21-million/","credibility":2,"archive_timestamp":"2026-07-28T11:18:41+00:00"},{"url":"https://www.cryptopolitan.com/aztec-labs-product-2-1m-exploit/","name":"Aztec Labs draws line with deprecated Aztec Connect product after $2.1M exploit — Cryptopolitan","type":"news_article","archive_url":"https://web.archive.org/web/20260727102750/https://www.cryptopolitan.com/aztec-labs-product-2-1m-exploit/","credibility":2,"archive_timestamp":"2026-07-27T10:27:50+00:00"},{"url":"https://coinjournal.net/news/aztec-network-loses-over-4-million-in-three-days-to-two-subsequent-hacks/","name":"Aztec Network loses over $4 million in three days to two subsequent hacks — CoinJournal","type":"news_article","archive_url":"https://web.archive.org/web/20260727092108/https://coinjournal.net/news/hype-price-outlook-hyperliquid-revenue-crosses-1-16b-as-open-interest-tops-6b/?dynamic","credibility":2,"archive_timestamp":"2026-07-27T09:21:08+00:00"},{"url":"https://coinpedia.org/news/aztec-hit-again-another-2-16-million-drained-just-days-after-previous-exploit","name":"Aztec Hit Again: Another $2.16 Million Drained Just Days After Previous Exploit — Coinpedia","type":"news_article","archive_url":"https://web.archive.org/web/20260727170438/https://coinpedia.org/news/aztec-hit-again-another-2-16-million-drained-just-days-after-previous-exploit/","credibility":2,"archive_timestamp":"2026-07-27T17:04:38+00:00"},{"url":"https://coinalertnews.com/news/2026/06/15/aztec-connect-exploit-2-million","name":"Aztec Connect Exploit Drains $2.1M from Deprecated Ethereum Bridge — CoinAlertNews","type":"news_article","archive_url":"https://web.archive.org/web/20260727132743/https://coinalertnews.com/news/2026/06/15/aztec-connect-exploit-2-million","credibility":2,"archive_timestamp":"2026-07-27T13:27:43+00:00"},{"url":"https://cryptobriefing.com/aztec-connect-exploit-deprecated-contract/","name":"Aztec Connect's abandoned smart contract exploited for $2M three years after shutdown — Crypto Briefing","type":"news_article","archive_url":"https://web.archive.org/web/20260727051900/https://cryptobriefing.com/aztec-connect-exploit-deprecated-contract/","credibility":2,"archive_timestamp":"2026-07-27T05:19:00+00:00"},{"url":"https://thedefiant.io/news/hacks/aztec-connect-deprecated-contract-exploit-2-1m-zk-proof","name":"Aztec Connect Drained of $2.1M Through Deprecated Contract — The Defiant","type":"news_article","archive_url":"http://web.archive.org/web/20260625160807/https://thedefiant.io/news/hacks/aztec-connect-deprecated-contract-exploit-2-1m-zk-proof","credibility":2,"archive_timestamp":"2026-06-25T16:08:07+00:00"},{"url":"https://cointelegraph.com/news/aztec-connects-depreciated-smart-contract-exploited-for-2-million","name":"Aztec Connect Exploited For $2.1 Million — CoinTelegraph","type":"news_article","archive_url":"http://web.archive.org/web/20260719235622/https://cointelegraph.com/news/aztec-connects-depreciated-smart-contract-exploited-for-2-million","credibility":2,"archive_timestamp":"2026-07-19T23:56:22+00:00"},{"url":"https://www.coininsider.com/news/attacker-drains-2-1-million-from-deprecated-aztec-connect-in-proof-verification-exploit/","name":"Attacker Drains $2.1 Million From Deprecated Aztec Connect in Proof Verification Exploit — CoinInsider","type":"news_article","archive_url":"http://web.archive.org/web/20260618094143/https://www.coininsider.com/news/attacker-drains-2-1-million-from-deprecated-aztec-connect-in-proof-verification-exploit/","credibility":2,"archive_timestamp":"2026-06-18T09:41:43+00:00"},{"url":"https://www.kucoin.com/news/flash/aztec-connect-hacked-for-2-19m-via-zk-rollup-vulnerability","name":"Aztec Connect Hacked for $2.19M via ZK-Rollup Vulnerability — KuCoin","type":"news_article","archive_url":"http://web.archive.org/web/20260727173208/https://www.kucoin.com/news/flash/aztec-connect-hacked-for-2-19m-via-zk-rollup-vulnerability","credibility":2,"archive_timestamp":"2026-07-27T17:32:08+00:00"},{"url":"https://ambcrypto.com/aztec-network-attacked-twice-in-3-days-hacker-drains-2-21m-in-digital-assets/","name":"Aztec Network attacked twice in 3 days — AMBCrypto","type":"news_article","archive_url":"http://web.archive.org/web/20260622100842/https://ambcrypto.com/aztec-network-attacked-twice-in-3-days-hacker-drains-2-21m-in-digital-assets/","credibility":2,"archive_timestamp":"2026-06-22T10:08:42+00:00"},{"url":"https://cryip.co/aztec-private-rollup-bridge-hit-again-2-2m-exploit/","name":"Aztec Private Rollup Bridge Hit Again as Attackers Drain $2.2 Million — Cryip","type":"news_article","archive_url":"https://web.archive.org/web/20260726233323/https://cryip.co/aztec-private-rollup-bridge-hit-again-2-2m-exploit/","credibility":2,"archive_timestamp":"2026-07-26T23:33:23+00:00"},{"url":"https://nulltx.com/aztec-exploited-twice-in-three-days-as-attackers-drain-over-4m/","name":"Aztec Exploited Twice in Three Days as Attackers Drain Over $4M — NullTX","type":"news_article","archive_url":"https://web.archive.org/web/20260727002252/https://nulltx.com/aztec-exploited-twice-in-three-days-as-attackers-drain-over-4m","credibility":2,"archive_timestamp":"2026-07-27T00:22:52+00:00"},{"url":"https://crypto.news/aztec-connect-loses-2-1m-after-old-contract-exploit/","name":"Aztec Connect loses $2.1m after old contract exploit — Crypto.news","type":"news_article","archive_url":"https://web.archive.org/web/20260727093233/https://crypto.news/aztec-connect-loses-2-1m-after-old-contract-exploit/","credibility":2,"archive_timestamp":"2026-07-27T09:32:33+00:00"},{"url":"https://dev.to/cryip/how-a-single-validation-mismatch-can-drain-millions-lessons-from-the-aztec-connect-exploit-2598","name":"How a Single Validation Mismatch Can Drain Millions — DEV Community / Cryip","type":"research","archive_url":"https://web.archive.org/web/20260727095421/https://dev.to/cryip/how-a-single-validation-mismatch-can-drain-millions-lessons-from-the-aztec-connect-exploit-2598","credibility":3,"archive_timestamp":"2026-07-27T09:54:21+00:00"},{"url":"https://aztec-labs.com/blog/aztec-connect-incident.html","name":"Aztec Connect Incident — Aztec Labs (official post-mortem)","type":"official","archive_url":"http://web.archive.org/web/20260709233036/https://aztec-labs.com/blog/aztec-connect-incident.html","credibility":1,"archive_timestamp":"2026-07-09T23:30:36+00:00"},{"url":"https://protos.com/aztec-network-hit-by-second-hack-this-week-as-escapehatch-drained-of-2m/","name":"Aztec Network hit by second hack this week as escapeHatch drained of $2M — Protos","type":"news_article","archive_url":"https://web.archive.org/web/20260727134651/https://protos.com/aztec-network-hit-by-second-hack-this-week-as-escapehatch-drained-of-2m/","credibility":2,"archive_timestamp":"2026-07-27T13:46:51+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-aztec-connect-hack-june-2026","name":"Explained: The Aztec Connect Hack (June 2026) — Halborn Security","type":"research","archive_url":"https://web.archive.org/web/20260727012643/https://www.halborn.com/blog/post/explained-the-aztec-connect-hack-june-2026","credibility":2,"archive_timestamp":"2026-07-27T01:26:43+00:00"},{"url":"https://www.tronweekly.com/aztec-network-exploit-2-16m-drained-from/","name":"Aztec Network Exploit: $2.16M Drained From Deprecated Bridge — TronWeekly","type":"news_article","archive_url":"https://web.archive.org/web/20260727203737/https://www.tronweekly.com/aztec-network-exploit-2-16m-drained-from/","credibility":2,"archive_timestamp":"2026-07-27T20:37:37+00:00"},{"url":"https://themerkle.com/attacker-drains-2-1-million-from-deprecated-aztec-connect-contracts-in-ethereum-exploit/","name":"Attacker Drains $2.1 Million From Deprecated Aztec Connect Contracts — The Merkle News","type":"news_article","archive_url":null,"credibility":2,"archive_timestamp":null},{"url":"https://coinlaw.io/aztec-second-2-1m-hack-private-rollup-bridge/","name":"Aztec Hit by Second $2.1M Hack in Days as Bridge Drained — CoinLaw","type":"news_article","archive_url":"https://web.archive.org/web/20260726232855/https://coinlaw.io/aztec-second-2-1m-hack-private-rollup-bridge/","credibility":2,"archive_timestamp":"2026-07-26T23:28:55+00:00"},{"url":"https://www.namecoinnews.com/aztec-private-rollup-bridge-loses-2-16m/","name":"Aztec Network's Private Rollup Bridge Exploited for $2.16M — NamecoinNews","type":"news_article","archive_url":"https://web.archive.org/web/20260727014343/https://www.namecoinnews.com/aztec-private-rollup-bridge-loses-2-16m/","credibility":2,"archive_timestamp":"2026-07-27T01:43:43+00:00"},{"url":"https://capwolf.com/aztec-connect-hit-by-2-1-million-exploit-in-old-contract/","name":"Aztec Connect Hit by $2.1 Million Exploit in Old Contract — CapWolf","type":"news_article","archive_url":"https://web.archive.org/web/20260726232333/https://capwolf.com/aztec-connect-hit-by-2-1-million-exploit-in-old-contract/","credibility":2,"archive_timestamp":"2026-07-26T23:23:33+00:00"},{"url":"https://www.cryptotimes.io/2026/06/15/aztec-exploit-drains-2-19m-from-dormant-privacy-protocol/","name":"Aztec Exploit Drains $2.19M From Dormant Privacy Protocol — CryptoTimes","type":"news_article","archive_url":"https://web.archive.org/web/20260728015412/https://www.cryptotimes.io/2026/06/15/aztec-exploit-drains-2-19m-from-dormant-privacy-protocol/","credibility":2,"archive_timestamp":"2026-07-28T01:54:12+00:00"},{"url":"https://x.com/aztecFND/status/2067511967237939636","name":"Aztec Foundation official statement on June 17 exploit — X (Twitter)","type":"official","archive_url":null,"credibility":1,"archive_timestamp":null},{"url":"https://www.kucoin.com/news/flash/legacy-aztec-contracts-drained-4m-in-zk-proof-exploits-active-network-unscathed","name":"Legacy Aztec Contracts Drained $4M in ZK-Proof Exploits — Active Network Unscathed — KuCoin","type":"news_article","archive_url":"https://web.archive.org/web/20260727013505/https://www.kucoin.com/news/flash/legacy-aztec-contracts-drained-4m-in-zk-proof-exploits-active-network-unscathed","credibility":2,"archive_timestamp":"2026-07-27T01:35:05+00:00"},{"url":"https://coinpaper.com/32030/aztec-suffers-second-215m-exploit-in-less-than-a-week","name":"Aztec Suffers Second $2.15M Exploit in Less Than a Week — CoinPaper","type":"news_article","archive_url":"https://web.archive.org/web/20260727132751/https://coinpaper.com/32030/aztec-suffers-second-215m-exploit-in-less-than-a-week","credibility":2,"archive_timestamp":"2026-07-27T13:27:51+00:00"},{"url":"https://cryip.co/aztec-connect-exploit-drains-2-19m-from-deprecated-protocol-aztec-network-safe/","name":"Aztec Connect Exploit Drains $2.19M From Deprecated Protocol — Cryip","type":"news_article","archive_url":"http://web.archive.org/web/20261024014935/https://cryip.co/aztec-connect-exploit-drains-2-19m-from-deprecated-protocol-aztec-network-safe/","credibility":2,"archive_timestamp":"2026-10-24T01:49:35+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-06-19T12:07:46.835264+00:00","updated_at":"2026-10-31T19:44:46.442+00:00"},"source_quality":{"total":31,"tier1":0,"tier2":1,"tier3":2,"unrated":28},"follower_count":null,"content_updated_at":"2026-10-31T19:44:46.881Z","last_fact_checked_at":"2026-10-27T11:43:36.955Z","fact_check_next_allowed_at":"2026-11-03T11:43:36.955Z","update_next_allowed_at":null}