Aztec Deprecated Private Rollup Bridge Exploit (June 2026)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·f4pnis…zUUvSummary
In June 2026, two separate exploits drained a combined total of over $4 million from deprecated Aztec Network smart contracts — Aztec Connect on June 14 ($2.19M) and the Aztec Private Rollup Bridge on June 17 ($2.16M). Both contracts had been shut down years earlier but remained immutable and on-chain, custodying residual user assets with no administrative override capability.
Connected Entities
3 entities · 60 linked investigations- Aztec Deprecated Private Rollup Bridge Exploit (June 2026)→mentioned with→Ethereum(70%)
- Aztec Deprecated Private Rollup Bridge Exploit (June 2026)→mentioned with→Aztec Connect — Deprecated Bridge Double Exploit (June 2026)(80%)
- Aztec Connect — Deprecated Bridge Double Exploit (June 2026)→mentioned with→Ethereum(80%)
Timeline(8 events)
2022
Aztec Private Rollup Bridge launched (approximate year; deprecated approximately 2022)
Aztec Foundation statement via XMarch 2023
Aztec Connect deprecated; team renounces admin keys, contract remains immutable and on-chain
Aztec Labs statement via Cryptopolitan14 June 2026
First exploit: attacker (funded via Tornado Cash, address 0x0f18...edd17) drains approximately $2.19M from Aztec Connect RollupProcessorV3 via ZK-SNARK settlement boundary bypass across 14 consecutive processRollup() calls in a single atomic transaction
SlowMist analysis via CryptoTimes14 June 2026
Aztec Foundation issues official statement distancing current network and AZTEC ERC-20 token from the Aztec Connect exploit
Aztec Foundation — X (Twitter)15 June 2026
SlowMist publishes detailed root cause analysis of the $2.19M Aztec Connect exploit, identifying ZK-proof settlement boundary mismatch as the core vulnerability
CryptoTimes17 June 2026
Second exploit: attacker drains approximately $2.16M (1,158 ETH, 150,000 DAI, ~0.47 renBTC) from the deprecated Aztec Private Rollup Bridge via unprotected escapeHatch() function lacking access controls
Aztec Network's RollupProcessor Exploited for $2.21 Million — CryptoTimes17 June 2026
Aztec Foundation issues second official statement confirming deprecated product status and absence of links to current network or AZTEC ERC-20 token
Aztec Foundation — X (Twitter)18 June 2026
Combined losses from both exploits reported at over $4 million; no funds recovered; current Aztec network confirmed unaffected
CoinJournalDecision Log
- hash: DRB6qnVydp2tk6Ry6K1mGMa8ArX18pcepyCvjQv85GRJ
This investigation is cryptographically anchored to the Solana blockchain (1 event). 14 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 6/25/2026, 5:12:25 PM
last updated: 7/28/2026, 11:20:14 AM
avoid.net — verified advice for a post-truth world