Aztec Labs Probes Exploit Tied to Discontinued 2021 Payment Product

Aztec Labs said on June 18 (UTC+8) that it is investigating a security incident involving its Aztec payment product that was discontinued in 2021. The firm said roughly $2 million was moved from a non-upgradable smart contract, which it cannot administer, pause, or upgrade. Aztec Labs added that the incident is not related to the June 14 exploit involving the discontinued Aztec Connect product, and that it will continue monitoring the situation and share updates. Earlier, SlowMist founder Yu Xian wrote that Aztec's Private Rollup Bridge appeared to have suffered a security incident, citing three suspicious transfers that drained about $2.15 million. The assets involved—including ETH, DAI, and renBTC—were sent to attacker-controlled addresses. (Source: Foresight News)