Hacker Exploits Unused Aztec Smart Contract, Drains $2.15M
A hacker exploited a vulnerability in an outdated Aztec Payments smart contract on the Aztec L2 network, stealing approximately $2.15 million. The attacker spent only 0.134 ETH ($230) to execute the attack.
On June 18, a hacker compromised an unused smart contract on the Aztec L2 network, causing estimated losses of $2.15 million. The vulnerability was found in the outdated Aztec Payments product, specifically in the PrivateRollupBridge contract's proof verification logic. The attacker spent just 0.134 ETH (~$230) to carry out the exploit.
This is not the first security incident for Aztec in recent days. On June 14, another outdated router contract was drained of nearly $2.19 million.
Source: ForkLog