Aztec Discloses Critical Flaw in the Proving System Behind Its Alpha V5 Privacy Network

Aztec, the privacy-focused Ethereum layer-2 network, disclosed a critical vulnerability in the proving system that secures its Alpha V5 release. Contributors identified the defect on July 27 through internal auditing assisted by artificial intelligence, and describe an attacker who could construct a proof that passes verification for a transaction the network should reject. Aztec told users to treat funds, applications and contract state on V5 as exposed to a protocol-level failure until incident response finishes and network operators complete the required actions. The repair is planned for the next release rather than a patch to the current one.

The class of bug matters more than the individual instance. A zero-knowledge rollup replaces re-execution with mathematics: the layer-1 contract accepts a state transition because a proof says it is correct. When the proving system itself is unsound, nothing downstream catches the error, because there is no independent party recomputing the result. That is the structural difference from a smart-contract exploit, where honest nodes at least see the transaction that drained the pool.

This is the second such disclosure from the same team inside six months. Aztec published a critical vulnerability in Alpha V4 in March, saying that flaw affected the proving system as a whole and could allow theft of user funds. The V5 release was presented as a substantial upgrade to the Alpha network, with applications including a live on-chain game built on private state. Aztec says internal and external human audits are complete, that reviewers have found no other high-severity or critical V5 issues so far, and that AI-assisted review continues.

The disclosure is evidence for a claim that privacy engineers have made for a while and that most users have not taken into account. Proof systems are young software, the circuits are hard to reason about, and the industry has been shipping them into production faster than it has built independent verification of them. Aztec's decision to publish before the fix ships, rather than after, at least gives users the information needed to withdraw.