Abandoned Aztec Connect contract drained of $2.1M in exploit

An attacker exploited a verification flaw in Aztec Connect's deprecated, immutable smart contract, stealing $2.1M in crypto including 909 ETH. No current Aztec Network users were affected.

• The attacker exploited a mismatch between Aztec Connect's verification and settlement logic on Ethereum, repeating the attack 7 times across 7 assets.
• Stolen funds include 909 ETH, 270,000 DAI, and wrapped staked ETH.
• Aztec Connect was deprecated in March 2023 and its contracts were fully immutable, meaning no one could pause or upgrade them.
• The exploit is part of $44M stolen across at least 13 crypto hacks so far in June, per DeFiLlama.

Coinporta summarises news for fast scanning. Full reporting belongs to the source.