INCIDENT EVIDENCE GRAPH
Aztec Bridge - Rekt
One deprecated contract, one flawed escape hatch circuit, and a verifier that should have been retired years earlier. Aztec’s legacy rollup contract lost roughly $2.198 million after a ZK proof passed a broken root-binding check.
- Victim: Aztec legacy rollup contract
- Actor: Unspecified attacker
- Exploit: Broken root-binding check for ZK proofs
- Method: Crafting a ZK proof that passes a flawed root-binding check