Aztec Discloses a Critical Soundness Flaw in Its Alpha V5 Proving System

Aztec, the privacy-focused Ethereum layer-2 network, has disclosed a critical vulnerability in the proving system behind its Alpha V5 release. Core contributors identified the defect on July 27 during internal auditing assisted by AI tools. According to the disclosure, an attacker may be able to build a zero-knowledge proof that the network's verifier accepts for a transaction the rules should reject. Contributors advised users to treat funds, applications and contract state on Alpha V5 as exposed to a protocol-level failure until incident response finishes and network operators complete the required actions.

This is a soundness failure, not an ordinary smart-contract bug. A rollup that proves its state transitions replaces the work every node would otherwise redo. When the proof system itself accepts an invalid statement, the fallback most networks rely on, independent re-execution by validators, does not exist to catch it. That is the reason this class of defect keeps arriving through embargoed disclosure timed to an upgrade rather than through an on-chain incident.

This is not Aztec's first disclosure of this kind. In March, the team disclosed a critical flaw affecting the entire Alpha V4 proving system and told V4 users to withdraw funds before June 25. That date mattered because it was when the V5 governance proposal was set to move on-chain, a step that would force public disclosure of the older bugs under the project's transparency commitments. Two consecutive alpha releases have now carried a critical proving-system defect, and both were found by the people building the system rather than by an attacker.

The network is not idle infrastructure. Applications have been shipping on it, including a live on-chain game built around hidden state, the kind of use that only works when execution is private. Aztec's pitch, and the pitch of every confidential-execution project competing with it, rests on users believing the cryptography holds. Each disclosure of this kind moves the conversation about privacy chains from what they can hide to whether their verifiers can be fooled.