Aztec Private Rollup Bridge

What happened

Three days after the Aztec Connect exploit, an attacker drained about $2.16 million (roughly 1,158 ETH) from Aztec's deprecated Private Rollup Bridge on 17 June 2026 via its escape-hatch mechanism.

The attacker constructed a fake zero-knowledge claim proof accepted by the RollupProcessor's verification logic: the proof system did not correctly bind a victim's final output note to its rightful recipient, letting a malicious escape-hatch caller substitute arbitrary outputs. Aztec confirmed the exploit targeted a deprecated product unrelated to the current network.