
PeckShield flagged a second exploit on Aztec Network's Private Rollup Bridge, with $2.16M in ETH, DAI, and renBTC stolen. The attacker was funded via HitBTC.
PeckShield flagged an exploit on Aztec Network's Private Rollup Bridge on Wednesday. The attacker made off with roughly $2.16 million in crypto, including 1,158 Ether, 150,000 DAI, and 0.47 renBTC. The security firm traced the initial funding to 0.134 ETH from the exchange HitBTC.
This is the second incident on Aztec in a week. The community noticed immediately. One user posted: "Again? Didn't they get exploited last week?" The question gets at a bigger problem for protocols running cross-chain or rollup bridges. Those structures hold large pools of locked liquidity, making them prime targets. When a bridge gets hit twice in quick succession, users start to wonder whether the vulnerability is structural, not accidental.
Aztec's rollup bridge lets users deposit assets into a privacy-focused layer on Ethereum. The attacker exploited some part of that infrastructure to pull out ETH, DAI, and renBTC. The exact vulnerability has not been disclosed. The stolen Ether, which represents the bulk of the loss, is a reminder that even well-known Ethereum-based protocols remain exposed to smart-contract risk.
For traders and liquidity providers, the event raises a practical question: how quickly can Aztec identify and patch the hole? A thorough post-mortem with a clear fix might contain the damage to trust. A repeat exploit suggests the internal review after the first incident may have missed something. If the same mechanism was exploited again, that signals a deeper problem in the code base or the operational security around the bridge.
The attacker's funding trace is a narrow lead. HitBTC is a smaller exchange, and blockchain investigators often use such initial funding to track the wallet cluster. Whether the funds can be frozen or traced back depends on the exchange's cooperation and how quickly the attacker moves the stolen assets. So far there is no word on recovery efforts from Aztec.
Across the crypto market, bridge and rollup exploits have remained a persistent pain point. Our crypto market analysis has tracked several similar events this year, each eroding confidence in cross-chain infrastructure. For Aztec, the next 48 hours will be critical. If the team publishes a detailed breakdown of the vulnerability and a timeline for a fix, the market may treat this as a contained event. If silence follows, the loss of trust could spill over to other privacy-focused rollup projects.
PeckShield said it is monitoring the attacker's wallet. No further details have emerged from Aztec Network as of Thursday morning.
Prepared with AlphaScala research tooling and grounded in primary market data: live prices, fundamentals, SEC filings, hedge-fund holdings, and insider activity. Each story is checked against AlphaScala publishing rules before release. Educational coverage, not personalized advice.