Aztec Discloses a Second Critical Proving-System Flaw, This Time on Its Live V5 Network

Aztec, the privacy-focused Ethereum layer-2 network, has published a disclosure stating that its live Alpha V5 network contains a critical vulnerability in the proving system. Core contributors identified the defect through internal auditing assisted by artificial-intelligence tooling. The stated failure mode is soundness: an attacker may be able to build a proof that the verifier accepts for a transaction the network should have rejected. Aztec says users should treat funds, applications and contract state on V5 as exposed to a protocol-level failure until contributors finish incident response and operators complete the required network actions.

This is the second consecutive Aztec release to carry a proving-system defect. The team disclosed a critical flaw in Alpha V4 earlier this year, told V4 users to withdraw before the V5 governance vote, and said at the time that the bug touched the proving system as a whole and could lead to theft of user funds. Alpha V5 was the version meant to close those findings. Instead, the fix cycle produced a fresh soundness bug in the same layer.

A soundness bug is a different risk class from a smart-contract exploit. On an optimistic rollup, honest nodes re-execute transactions and can dispute an invalid state root. On a validity rollup, proof verification is the only check on whether a state transition is valid before it becomes final, and no re-execution fallback catches a verifier that accepts a bad proof. That is why disclosure gets embargoed until an upgrade is ready, and why the interval between discovery and remediation leaves users unable to independently assess the risk during that interval.

The timing sits against a broader push by privacy networks to present confidential execution as a prerequisite for institutional on-chain activity. Miden, a competing privacy chain, argues in its own material that most blockchains today are not private and that the general public does not yet recognize what public state actually exposes. That pitch depends on the underlying proof machinery being trustworthy. Every soundness disclosure raises the evidentiary burden these networks must clear before a bank or an asset manager routes real balances through them.