Aztec Discloses Critical Proving-System Flaw in Its Live Alpha V5 Privacy Network

Aztec, the privacy-focused Ethereum layer-2 network, has disclosed a critical vulnerability in the proving system behind its Alpha V5 network. Core contributors identified the defect on 27 July 2026 through internal auditing assisted by AI tooling. In the disclosure, Aztec says an attacker could build a proof that passes verification for a transaction the network is supposed to reject, and that such a transaction could then move the chain into a state outside the rules the protocol intends to enforce. Contributors say funds, applications and contract state on V5 should be treated as exposed until incident response finishes and node operators complete the required network actions.

This is the second proving-system disclosure of its kind at Aztec inside a year. In March the team disclosed a critical flaw affecting Alpha V4 and warned that exploitation could lead to theft of user funds, then asked users to withdraw before a governance vote made the details public. The Alpha V5 network launched as the successor and now carries live applications, including the on-chain strategy game Dark Forest, which went live on Aztec.

The pattern deserves attention on its own terms. Aztec says human audits, both internal and external, were already complete when the AI-assisted review surfaced the problem. That is a statement about the limits of conventional audit coverage for zero-knowledge circuits, where the failure is not a logic error a reviewer can read but an under-constrained relation that lets a false statement satisfy the verifier. Nothing in an audit report certifies that the constraint set matches the intended rules.

Aztec has raised its bug bounty to $2 million and continues AI-assisted review. The disclosure follows the standard practice of privacy networks: describe the class of failure, withhold the reproduction path, and time publication to an upgrade. That protects users during the patch window, and it also means outsiders cannot yet judge how close the network came to an exploited state.