The Aztec Foundation was made aware of a potential exploit targeting Aztec Connect which occurred earlier today, June 14, 2026. There are no links between this product and any smart contracts related to the AZTEC ERC20 token, or current Aztec network. Aztec Connect was deprecated 3 years ago and Aztec Labs retains no controls over the system. Please follow @AztecLabs_ for updates and further information.

🚨SlowMist TI Alert🚨 @aztecnetwork has been exploited again. 💸 Loss: 1,158 ETH+150,000 DAI+0.4696 renBTC (~$2,209,704.23 USD) 🔍 Root Cause: The `RollupProcessor.escapeHatch()` function (`0x737901bea3eeb88459df9ef1be8ff3ae1b42a2ba`) lacks access control: no `onlyOwner`, no `rollupProviders` authorization, and no provider signature verification. When `rollupSize == 0`, the TurboVerifier accepts an escape hatch proof, and `processDepositsAndWithdrawals()` directly trusts the `proofData` public inputs (`publicOutput`, `outputOwner`, `assetId`) without independent validation of fund ownership or withdrawal balance, executing `withdraw(1158 ETH, attacker, 0)`. 📌 Attacker EOA: `0x6952d9246e9afe8b887b2877225163436f78e97f` 📌 Victim Contract: `RollupProcessor` at `0x737901bea3eeb88459df9ef1be8ff3ae1b42a2ba` 📌 Verifier Contract: `TurboVerifier` at `0x48cb7ba00d087541dc8e2b3738f80fdd1fee8ce8` Impact: Attacker drained 1,158 ETH from the `RollupProcessor` by submitting a valid escape hatch proof with spoofed public inputs, exploiting validation in the escape hatch withdrawal path. Powered by #SlowMist#.AI

Mexico at Azteca for the World Cup opener. Altitude advantage. Home crowd. Historic stadium. Now imagine they lose… A certain country starting with B might actually break the internet today. 🤣👇

Mexico is back at the Azteca 3 wins from 3 6 goals 0 conceded But the fifth game has been their wall for 40 years Ecuador just came back against Germany, they’re clearly not here to be part of someone else’s script Home-field destiny, or another heartbreak? 👀💜

We are investigating a potential exploit affecting Aztec Connect. ~$2.1m was transferred from the immutable smart contract in transaction: Aztec Connect was deprecated 3 years ago. Aztec Labs holds no admin keys or control over the system; it cannot be paused or upgraded by us. We will share further updates in due course.

We are investigating a potential exploit affecting a deprecated Aztec payments product from 2021. ~$2m was transferred from the immutable smart contract in transaction: The deprecated product is an immutable stage 2 rollup that was sunset in 2022. Aztec Labs holds no admin keys or control over the system; it cannot be paused or upgraded by us. This is a separate incident from the exploit on the depreciated Aztec Connect product that occurred on June 14, 2026. We will share further updates in due course.

Let's consult the historical record to see what the Aztec society was up to when the Spanish conquered it. First, from Cortes: “They have a most horrid and abominable custom which truly ought to be punished and which until now we have seen in no other part, and this is that, whenever they wish to ask something of the idols, in order that their plea may find more acceptance, they take many girls and boys and even adults, and in the presence of the idols they open their chests while they are still alive and take out their hearts and entrails and burn them before the idols, offering the smoke as sacrifice. Some of us have seen this, and they say it is the most terrible and frightful thing they have ever witnessed… not one year passes in which they do not kill and sacrifice some fifty persons in each temple; and this is done and held as customary… not one year has passed… in which three or four thousand souls have not been sacrificed in this manner.” And now Bernal Diaz del Castillo: “The dismal drum of Huichilobos sounded again, accompanied by conches, horns and trumpet-like instruments. It was a terrifying sound, and when we looked at the tall cue [temple] from which it came we saw our comrades who had been captured in Cortes’ defeat being dragged up the steps to be sacrificed. When they had hauled them up to a small platform in front of the shrine where they kept their accursed idols we saw them put plumes on the heads of many of them; and they made them dance with a sort of fan in front of Huichilobos. Then after they had danced the papas [priests] laid them down on their backs on some narrow stones of sacrifice and, cutting open their chests, drew out their palpitating hearts which they offered to the idols before them.” ... “Every day we saw sacrificed before us three, four or five Indians whose hearts were offered to the idols and their blood plastered on the walls, and their feet, arms and legs of the victims were cut off and eaten… Every wall of this chapel and the whole floor, had become almost black with human blood, and… the stench was worse than in a Spanish slaughter-house.” ... “When we arrived at the great market place, called Tlaltelolco, we were astounded at the number of people and the quantity of merchandise that it contained… Let us begin with the dealers in gold, silver, and precious stones, feathers, mantles, and embroidered goods. Then there were other wares consisting of Indian slaves both men and women; and I say that they bring as many of them to that great market for sale as the Portuguese bring negroes from Guinea…. They brought some of them tied to long poles by means of collars around their necks so they would not escape, and others left loose.” ~~ This is what the Spanish conquered in the name of Christendom - a Stone-Age society consumed with ritualistic human sacrifice, cannibalism and slavery.