Hacker Steals $2 Million from Outdated Aztec Smart Contract

Aztec Network, known for its privacy-enhancing features on Ethereum, has reported a significant security breach resulting in the theft of around $2.1 million. The funds were taken from an outdated smart contract associated with the Aztec Connect platform, which has not been operational since 2023.

In a tweet, Aztec Labs confirmed the incident, emphasizing that they are investigating the exploit that allowed funds to be transferred from the so-called immutable smart contract. They also reassured users that their active network and assets remain intact and safe.

Experts from BlockSec have linked the hack to discrepancies between the transaction verification process and settlement on the Ethereum blockchain. This mismatch allowed unauthorized value to be credited, leading to the exploit.

During the attack, the hacker managed to withdraw multiple assets, including 909 ETH and 270,000 DAI, exploiting vulnerabilities that had arisen due to missing access controls within the protocol.

Aztec Connect was initiated in 2022 but ceased accepting new deposits in March 2023 as the team shifted focus to developing the Aztec Network. The team clarified their lack of administrative control over the deprecated system, which prevents them from responding to breaches or making updates. The network launched the Ignition Chain in late 2025, emphasizing its commitment to being a fully decentralized layer-two solution on Ethereum.