According to on-chain investigators, Aztec's Private Rollup Bridge was exploited on June 17, 2026, resulting in losses of approximately $2.15 million. The attacker drained roughly 1,158 ETH, 150,000 DAI, and 0.47 renBTC from the contract and transferred the assets to controlled wallets, according to security researcher Cos and estimates from blockchain security firm PeckShield.
The Aztec Foundation clarified that the affected system is a deprecated Stage 2 rollup sunset in 2022 and has no connection to the current Aztec network or AZTEC ERC-20 token. The teams stated they are investigating the incident and will provide further updates as details emerge.