POPA ReconAztec Connect Drained for $2.1M via ZK Proof Bug
Aztec Connect Drained for $2.1M via ZK Proof Bug An attacker drained funds from a deprecated Aztec Connect contract by exploiting a flaw in its ZK proof verification: a crafted rollup submission passed the proof check while the settlement logic processed a different set of transactions. BlockSec says the exploit was repeated seven times across seven assets — 909 ETH, 270K DAI, 167 wstETH and more. Aztec Labs relinquished admin access in 2024, leaving the contracts fully immutable, so no one could pause them. Today's Aztec Network and its users are unaffected. Per DeFiLlama it is June's 13…
The excerpt is quoted from a public Telegram channel, which owns its text.