Aztec Discloses a Critical Flaw in the Proving System Behind Its Live Privacy Network

Aztec, the layer-2 network built for private smart contracts on Ethereum, has published a disclosure of a critical vulnerability in the proving system of its Alpha v5 release. Its core contributors identified the flaw on July 27 through internal auditing assisted by artificial intelligence tools. The described risk is soundness: an attacker could potentially build a zero-knowledge proof that the verifier accepts for a transaction the rules should reject.

Soundness failures are the most severe class of bug in this design. On a transparent chain, validators re-execute transactions and can catch an invalid state change by inspection. On a privacy chain, the proof is the only thing the network checks, because the transaction contents are hidden by construction. A verifier that accepts an invalid proof therefore has no second line of defense behind it. Aztec made the same point in March, when it disclosed a critical bug in Alpha v4 and said the issue affected the proving system as a whole and was not mitigated by public re-execution.

No account of stolen user funds from the v5 flaw has appeared in the project's disclosure or in subsequent coverage. Aztec has run a staged alpha with governance-activated upgrades and has told users to withdraw before deprecating earlier versions, which is the pattern of a network that treats its own cryptography as provisional rather than settled.

The uncomfortable detail is the discovery method. The same class of automated analysis that Boltz blamed for the probing that shut its swap service also found this bug before an attacker did. AI-assisted review is not inherently defensive or offensive. It compresses the time between a defect being written and a defect being found, and whoever runs it first gets the advantage.

Aztec's gas and fee design and its proving costs have improved through the alpha releases, and the project remains the most advanced attempt to make general private computation work on Ethereum. That progress and this disclosure come from the same process. Confidential execution is being tested in production, and the tests are producing findings.