We are investigating a potential exploit affecting a deprecated Aztec payments product from 2021. ~$2m was transferred from the immutable smart contract in transaction:
The deprecated product is an immutable stage 2 rollup that was sunset in 2022.
Aztec Labs holds no admin keys or control over the system; it cannot be paused or upgraded by us.
This is a separate incident from the exploit on the depreciated Aztec Connect product that occurred on June 14, 2026.
We will share further updates in due course.
We are investigating a potential exploit affecting Aztec Connect. ~$2.1m was transferred from the immutable smart contract in transaction:
Aztec Connect was deprecated 3 years ago. Aztec Labs holds no admin keys or control over the system; it cannot be paused or upgraded by us.
We will share further updates in due course.
Aztec Labs has acquired Obsidion, the team behind @ZKPassport.
The Obsidion team will continue to develop ZKPassport while also leading new consumer product developments.
The ZKPassport protocol will remain open source.