YFarmX

Tools Crypto Exploit Tracker exploit-0031

Exploit record

Aztec Connect

Loss
$2M
Attack vector
Smart Contract Bug
Chain
Ethereum
Sector
Infrastructure

What happened

On 14 June 2026 an attacker drained about $2.1 million from Aztec Connect, the deprecated privacy rollup product, using a crafted zero-knowledge proof that the verification logic wrongly accepted.

This was the first of two Aztec legacy-contract exploits in three days, together costing over $4 million. Aztec attributed the issues to proof-verification bugs in deprecated contracts; the Aztec Foundation stressed the affected products have no link to the current Aztec network or the AZTEC token.

Sources

One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026