Aztec Labs Hit by Second Exploit as Deprecated Bridge Drained of $2.16 Million

Key Facts

Amid escalating security concerns in the decentralized finance sector, Aztec Labs' deprecated Private Rollup Bridge was hit by a second exploit, resulting in a $2.16 million drain. According to reports, the attack targeted inactive smart contracts that still held residual funds, allowing the exploiter to withdraw assets despite the platform's deprecated status. Aztec Labs clarified that the affected product has no connection to the current mainnet or the AZTEC token.

This incident follows a similar exploit just days earlier, highlighting the risks associated with unmaintained legacy contracts in the DeFi ecosystem. Compared to major historical breaches like the $190 million Nomad bridge exploit in 2022, the Aztec loss is relatively small but remains a reputational headwind per market data. Research indicates that attackers increasingly scan for vulnerabilities in deprecated infrastructure where active monitoring and patching have ceased.

Looking ahead, market participants are monitoring the stability of privacy-centric tokens following these security breaches. According to the economic calendar, upcoming CPI data from Germany and France on June 12, 2026, will be key catalysts for broader market sentiment and risk appetite. Users are advised to verify their exposure to legacy Aztec contracts as a precautionary measure against further liquidity drains.