Aztec Network legacy bridge exploited for $2M+

Aztec Network's deprecated bridge was exploited for $2.15–$2.21M, draining 1,158 ETH, 150,000 DAI, and 0.47 renBTC. The current network and its token remain unaffected.

Aztec Network's deprecated Private Rollup Bridge contract on Ethereum was exploited, resulting in the theft of approximately $2.15–$2.21 million in crypto assets. The stolen funds included 1,158 ETH, 150,000 DAI, and about 0.47 renBTC. The attacker exploited a vulnerability in the contract's escapeHatch() function, which lacked proper access controls and allowed unauthorized withdrawals using manipulated proof data. The exploit was traced to a wallet initially funded with 0.134 ETH from HitBTC. This incident follows a similar exploit on another legacy Aztec contract just days earlier, highlighting ongoing security risks in outdated bridge infrastructure. Security firms SlowMist and PeckShield tracked the movement of stolen funds. Technical analysis indicates contract-level validation failures, not user-side compromises. The current Aztec Network and its ERC20 token were reportedly unaffected, but the events have raised concerns about the security of legacy DeFi and rollup bridge contracts.