# Aztec Discloses a Critical Flaw in the Proving System Behind Its Live Privacy Network

Core contributors found through internal AI-assisted auditing that an attacker might construct a proof passing verification for a transaction the network should reject, the second critical proving-system bug the project has disclosed this year.

- Published: 2026-08-11T05:53:59.872Z
- Canonical: https://polylog.news/crypto/2026-08-11/aztec-discloses-a-critical-flaw-in-the-proving-system-behind
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Aztec Network](https://aztec.network/blog/alpha-v5-proving-system-vulnerability), [Aztec Network](https://aztec.network/alpha-v5), [Aztec Network](https://aztec.network/blog/how-gas-works-on-aztec)

Aztec, the layer-2 network built for private smart contracts on Ethereum, has [published a disclosure of a critical vulnerability in the proving system of its Alpha v5 release](https://aztec.network/blog/alpha-v5-proving-system-vulnerability). Its core contributors identified the flaw on July 27 through internal auditing assisted by artificial intelligence tools. The described risk is soundness: an attacker could potentially build a zero-knowledge proof that the verifier accepts for a transaction the rules should reject.

Soundness failures are the most severe class of bug in this design. On a transparent chain, validators re-execute transactions and can catch an invalid state change by inspection. On a privacy chain, the proof is the only thing the network checks, because the transaction contents are hidden by construction. A verifier that accepts an invalid proof therefore has no second line of defense behind it. Aztec made the same point in March, when it disclosed a critical bug in [Alpha v4](https://aztec.network/alpha-v5) and said the issue affected the proving system as a whole and was not mitigated by public re-execution.

No account of stolen user funds from the v5 flaw has appeared in the project's disclosure or in subsequent coverage. Aztec has run a staged alpha with governance-activated upgrades and has told users to withdraw before deprecating earlier versions, which is the pattern of a network that treats its own cryptography as provisional rather than settled.

The uncomfortable detail is the discovery method. The same class of automated analysis that Boltz blamed for the probing that shut its swap service also found this bug before an attacker did. AI-assisted review is not inherently defensive or offensive. It compresses the time between a defect being written and a defect being found, and whoever runs it first gets the advantage.

Aztec's [gas and fee design](https://aztec.network/blog/how-gas-works-on-aztec) and its proving costs have improved through the alpha releases, and the project remains the most advanced attempt to make general private computation work on Ethereum. That progress and this disclosure come from the same process. Confidential execution is being tested in production, and the tests are producing findings.

## What this means

Privacy networks concentrate all of their security into the verifier, so a single soundness bug is equivalent to an unlimited mint on a transparent chain, and users cannot detect it by watching the ledger. Anyone allocating capital or building applications on a privacy layer-2 is underwriting the correctness of a proving system rather than the honesty of a validator set. The two outcomes that decide the sector's next year are proving stacks that survive repeated adversarial and automated review without further critical findings, which would make institutional confidential settlement credible, or a continued cadence of soundness disclosures, which would keep serious value on transparent chains regardless of how compelling the privacy argument is.

## What to watch

- Whether Aztec publishes the technical detail of the v5 bug after the fix is deployed, since the project committed to disclosing earlier v4 bugs once superseded and that record shows whether the flaws share a root cause.
- Whether independent auditors reproduce the finding in other proof systems built on the same components, which would turn a single-network problem into a sector-wide one.
- How much value users bridge into Aztec after the disclosure, which measures whether builders treat alpha-stage privacy as usable or as research.