Leaderboard
474All-time rank
Aztec Connect
Jun 14, 2026
$2.1M
Lost
$2.1M
Recovered
$0
Net loss
$2.1M
Unrecovered0% recovered
Aztec Connect's proof verification failed to match L1 state updates, letting attacker submit unvalidated transactions crediting themselves with value. 1M in ETH, DAI, wstETH and other tokens.
How the exploit worked
View reproducible PoCproof_id Accounting Bypass (whitehat reproduction).
Lost: N/A (purely educational; worst-case impact would have been ~$2M, matching the separate vulnerability that actually drained the contracts)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- Bridge
- Classification
- Bridge & Cross-Chain
- Technique
- Forged Proof
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jun 14, 2026Exploit executed — $2.1M drained via forged proof
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)