24x7 Flash News

Aztec Exploited Again, $2.15 Million in Assets Transferred

Aztec has reportedly been exploited again, with approximately $2.15 million in assets transferred from its Private Rollup Bridge address. The attacker utilized the Escape Hatch mechanism of Aztec’s RollupProcessor, submitting rollup proofs within the open window and exploiting a vulnerability in the processDepositsAndWithdrawals function. This allowed for three consecutive withdrawals: 1,158 ETH, 150,000 DAI, and 0.4696 renBTC, directly from the contract’s custodial reserves. The stolen funds were primarily moved to the address 0x6952…E97F, with some ETH already dispersed to other addresses. The attacker's Gas source was identified as unionchain.ai. This incident marks another significant breach for Aztec, raising concerns over the security of its systems.