Exploit targets abandoned DeFi bridge, highlighting risks of immutable, unsupported blockchain protocols.
Hackers exploited Aztec Connect’s deprecated smart contract, siphoning $2.1M in assets. The privacy-focused layer-2 rollup was abandoned in March 2023, with deposits halted and no admin controls remaining.
Aztec Connect launched in 2022 as a DeFi bridge but became fully immutable after deprecation, preventing upgrades or pauses. Crypto exploit losses in May totaled $68M, down 90% from the prior month, according to blockchain security firm CertiK.
Developers warned that abandoned contracts remain vulnerable to attacks, even years after discontinuation. The incident underscores security risks in decentralized finance infrastructure.