Aztec Connect Legacy Contract Exploited for $2.1 Million
- A deprecated Aztec Connect smart contract was drained of approximately 909 ETH, valued at around $2.1 million.
- The exploit targeted the immutable RollupProcessorV3 contract, which was part of Aztec’s discontinued infrastructure.
- Aztec Connect was shut down in March, and the affected contract was not part of the current network operations.
- Security firms linked the vulnerability to a flaw in ZK proof-verification logic.
This incident highlights risks associated with abandoned DeFi contracts that remain live after projects are shut down, as they can still be exploited if they hold assets.
Users should regularly check for assets in deprecated systems to mitigate potential risks from such legacy contracts remaining on-chain. (Source)
