Ethereum

2026

Connect

DeFi

Aztec

<p>Aztec, a privacy-first Ethereum L2 protocol, has recently experienced another exploit. Aztec has undergone 2nd exploit within 3 days, leading to the loss of more than $4 million. As per the official announcement of Aztec Labs, the platform is investigating the matter for suitable solutions. In this attack, the exploiters targeted the Aztec Private Rollup Bridge on the 17th of June.</p>
<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>We are investigating a potential exploit affecting a deprecated Aztec payments product from 2021. ~$2m was transferred from the immutable smart contract in transaction:<a href="https://t.co/FS4JoNnfiJ" rel="noopener noreferrer nofollow">https://t.co/FS4JoNnfiJ</a><br><br>The deprecated product is an immutable stage 2 rollup that was sunset in 2022.…</p>— Aztec Labs (@AztecLabs_) <a href="https://x.com/AztecLabs_/status/2067511785637163354?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 18, 2026</a>
  </blockquote>
 </div>
</figure>
<h2 class="wp-block-heading" id="aztec-private-bridge-exploit-raises-losses-to-4m-after-attack-of-june-14">Aztec Private Bridge Exploit Raises Losses to $4M after Attack of June 14</h2>
<p>As PeckShieldAlert disclosed based on the data from Etherscan, the 2nd exploit targeting Aztec within three days has increased the total losses beyond the $4M mark. In this respect, on June 17, the exploiters attacked the Aztec Private Bridge and effectively siphoned off nearly $2.165M in cryptocurrency. The respective activity included up to 1,158 $ETH, equaling a cumulative amount of over $2M as <a href="https://www.tradingview.com/symbols/ETHUSDT/" rel="noopener noreferrer nofollow">ETH/USDT</a> is trading around $1,747, 0.47 $renBTC, and 150,000 $DAI.</p>
<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p><a href="https://x.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#PeckShieldAlert</a> The <a href="https://x.com/aztecnetwork?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@aztecnetwork</a> Private Rollup Bridge has suffered an exploit, resulting in a loss of ~$2.165M worth of cryptos, including 1.158K <a href="https://x.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$ETH</a>, 150K <a href="https://x.com/search?q=%24DAI&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$DAI</a> &amp; 0.47 <a href="https://x.com/search?q=%24renBTC&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$renBTC</a><br><br>The exploiter was originally funded with 0.134 <a href="https://x.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$ETH</a> from <a href="https://x.com/hashtag/HitBTC?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#HitBTC</a>. <a href="https://t.co/CHZOOQ1eDW" rel="noopener noreferrer nofollow">pic.twitter.com/CHZOOQ1eDW</a></p>— PeckShield <a href="https://x.com/PeckShieldAlert/status/2067502440044437871?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 18, 2026</a>
  </blockquote>
 </div>
</figure>
<p>Additionally, the exploit took place just after the 14th June breach that targeted the defunct Aztec Connect product. The respective product had already resulted in significant harm to the network. Together, these events underscore persistent vulnerabilities existing in Aztec’s rollup model, while also signifying the sophisticated techniques of the exploiters who focus on immutable smart contracts.</p>
<p>At the same time, <a href="https://peckshield.com/" rel="noopener noreferrer nofollow">PeckShieldAlert</a> also revealed that the exploiter first received funding of 0.134 $ETH coins from HitBTC ahead of conducting the exploit. Subsequently, the attacker transacted $2,007,184.56 (1,158 $ETH) to the Aztec Private Rollup Bridge. Keeping this in view, the attacker utilized the escapeHatch function and circumvented the security safeguards to drain the capital. While reflecting on this matter, Aztec Labs mentioned that the impacted product was a payment rollup that was defunct from 2021.</p>
<h2 class="wp-block-heading" id="aztec-confirms-no-administrative-control-over-exploited-contract">Aztec Confirms No Administrative Control Over Exploited Contract</h2>
<p>According to Aztec Labs, the affected product is an immutable contract, and the platform cannot pause, upgrade, or control it. This left no administrative resource for Aztec Labs to stop the exploit. The company also clarified that this incident is different from the defunct Aztec Connect product’s exploit that occurred on June 14. Overall, incurring a staggering loss of more than $4M within less than a week raises challenges for Aztec while also denoting growing concerns amid the evolving expertise of the <a href="https://blockchainreporter.net/defi-decentralized-finance/" rel="noopener noreferrer nofollow">DeFi</a> exploiters.</p>

Aztech Network Faces 2nd Exploit in 3 days, Losses Over $4 Million

Table of Contents

BlockchainReporter

Other articles published on Jun 19, 2026

Join our free newsletter for daily crypto updates!