Safe

Million

ERC20

Aztec

<p>On June 17, Aztec Labs was found itself in the middle of an exploit for the second time in a week. An attacker drained around $2.16 million from Aztec’s deprecated Private Rollup Bridge. In response, Aztec Labs said the affected product has no connection to the current Aztec network or the AZTEC token.</p>
<h2 id="h-aztec-lost-2-16-million-as-attacker-drained" class="wp-block-heading">Aztec Lost $2.16 Million as Attacker Drained</h2>
<p>According to blockchain <a href="https://x.com/SlowMist_Team/status/2067501141861232735" rel="noopener noreferrer nofollow">security firm SlowMist</a>, the attacker targeted Aztec’s old Private Rollup Bridge, a product launched in 2021 and closed in 2022. Although the system was shut down, its smart contracts remained active on-chain because they were immutable.</p>
<p>SlowMist says the attacker managed to withdraw 1,158 ETH, 150,000 DAI, and 0.47 renBTC.&nbsp;</p>
<p>Interestingly, the exploit wallet (x73790…42a2ba) was initially funded with just 0.134 ETH from crypto exchange HitBTC before carrying out the attack.</p>
<p>Following news of the exploit, AZTEC declined about 1.6%, with the token trading near $0.0160 as investors reacted to the news.</p>
<h2 id="h-how-was-the-aztec-lab-exploited" class="wp-block-heading">How was the Aztec Lab Exploited?</h2>
<p>Researchers at SlowMist said the exploit was linked to a weakness in the bridge’s escape hatch () function, which was originally designed as an emergency withdrawal tool.</p>
<p>Their investigation found that the function lacked important security checks. The contract failed to properly verify withdrawal requests and trusted certain transaction data without independently confirming ownership of the funds.</p>
<p>As a result, the attacker (0x695…78e97f)was able to submit a seemingly valid proof with manipulated withdrawal information, causing the contract to release funds it should not have approved.</p>
<h2 id="h-aztec-says-current-network-is-safe" class="wp-block-heading">Aztec Says Current Network Is Safe</h2>
<p>Following the exploit, Aztec Labs said the affected product has no connection to the current Aztec network or the AZTEC token. The company explained that the bridge was shut down four years ago and operates as an immutable Stage 2 rollup.</p>
<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>The Aztec Foundation was made aware of a potential exploit targeting a deprecated product which occurred on June 17, 2026. There are no links between this product and any smart contracts related to the current network or the AZTEC ERC20 token.<br><br>The product was deprecated 4 years… <a href="https://t.co/kANaIuw8HF" rel="noopener noreferrer nofollow">https://t.co/kANaIuw8HF</a></p>— Aztec Foundation (@aztecFND) <a href="https://x.com/aztecFND/status/2067511967237939636?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 18, 2026</a>
  </blockquote>
 </div>
</figure>
<p>Because the contract is immutable, Aztec Labs cannot pause, upgrade, or directly intervene in the system. The team added that it no longer holds administrative control over the affected infrastructure.</p>
<p>The recent attack comes only days after another exploit involving the deprecated Aztec Connect product. That attack was <a href="https://x.com/aztecFND/status/2066175938887619055" rel="noopener noreferrer nofollow">discovered on June 14 </a>and resulted in estimated losses of more than $2.15 million.</p>

Aztec Hit Again: Another $2.16 Million Drained Just Days After Previous Exploit

Table of Contents

CoinPedia News

Other articles published on Jun 18, 2026

Join our free newsletter for daily crypto updates!