Legacy Aztec Connect Contract Exploited for $2.19 Million
- A deprecated Aztec Connect contract was exploited, resulting in a loss of approximately $2.19 million.
- The affected assets included ETH, DAI, and wstETH.
- The exploit involved a boundary gap vulnerability related to transaction counts and decoded slots.
- This incident highlights the risks associated with “zombie” smart contracts in DeFi systems.
The attack on the legacy RollupProcessorV3 contract underscores the dangers of leaving deprecated contracts live and funded on-chain, as they remain vulnerable to exploitation even after a protocol is no longer active.
This case serves as a reminder that inactive infrastructure can still pose significant risks, urging both developers and users to ensure proper shutdown procedures are followed for outdated systems. (Source)