- Hackers exploited a vulnerability in the outdated Aztec Connect protocol, stealing over $2.1 million.
- The breach highlights ongoing security concerns within DeFi, even for retired protocols.
- Aztec Foundation and CertiK experts are investigating the incident, emphasizing the importance of robust security measures.
Hackers Steal Over $2 Million from Outdated Aztec Connect Protocol
In a stunning revelation on June 14, 2026, hackers managed to extract more than $2.1 million from the obsolete Aztec Connect protocol on the Ethereum network. This incident underscores persistent vulnerabilities in decentralized finance (DeFi) systems, particularly those that have been decommissioned but remain operational.
A Vulnerability Exploited
The attack exploited a flaw in the mechanism responsible for proof verification within Aztec Connect. Notably, this protocol had been phased out three years prior, leaving it without active management or updates from its development team. Despite being dormant, it became a target due to its lingering presence on the blockchain.
Aztec Foundation’s Response
The attack was promptly reported by both the Aztec Foundation and security experts at CertiK. The foundation clarified that there are no links between this exploit and any smart contracts associated with the AZTEC ERC20 token or the current Aztec network. They highlighted that no administrative keys exist to pause or update the system, which compounds security challenges for outdated protocols.
The Mechanism of Attack
CertiK analysts were first to detect suspicious transactions draining approximately $2.19 million from an Aztec Connect Router contract. The issue arose from incomplete data verification processes within proofData components used for token transfers. This oversight allowed attackers to manipulate withdrawal operations undetected.
A Broader Perspective on DeFi Security
This incident serves as a reminder that even defunct protocols can become lucrative targets for cybercriminals. Despite a reduction in crypto market losses in May 2026 compared to April’s record-breaking $635 million losses from attacks, DeFi protocols and cross-chain bridges remain appealing targets for hackers due to their inherent complexity and often insufficient oversight.
In conclusion, this breach not only points out weaknesses in legacy systems but also emphasizes an urgent need for continuous vigilance and improvement in crypto security measures across all platforms and technologies involved in decentralized finance.
