Aztec Says an Attacker Could Forge Valid Proofs on Its Privacy Network, Puts V5 Funds at Risk

Aztec, the Ethereum layer-2 network built for private smart contracts, has disclosed a critical vulnerability in the proving system that secures its Alpha V5 release. According to the project's own account, an attacker may be able to construct a proof that passes verification for a transaction the network is supposed to reject. If the network accepts such a proof, the resulting state transition falls outside the rules the protocol is meant to enforce.

The practical consequence is direct. Aztec told users to treat funds, applications and contract state on V5 as exposed to a protocol-level failure until contributors finish incident response and network operators carry out the required actions. Contributors also said they cannot determine whether anyone exploited the flaw before they found it.

Core contributors identified the defect on 27 July 2026 through internal auditing assisted by artificial intelligence, after internal and external human audits had already been completed. Reviewers say they have found no other high-severity or critical issues in V5 so far. The fix is scheduled for V6, including circuit updates that stop the network from accepting proofs tied to the affected proving system. Aztec has been shipping applications on the network in parallel, including a live on-chain game built on private state.

This is the failure mode that separates zero-knowledge rollups from ordinary smart-contract risk. A buggy contract loses only the money inside that contract. A proving system that accepts an invalid proof breaks the guarantee the whole chain rests on, and the fallback most optimistic rollups rely on, namely validators re-executing transactions, does not exist here. The defect sits in mathematics and circuit construction, not in application logic, so an auditor reading Solidity code would never see it.

The disclosure also carries a second, uncomfortable message for the privacy sector. Aztec is the most technically ambitious attempt to put confidential execution on Ethereum, and its own tooling, not an outside attacker and not a bug-bounty hunter, found the problem. That outcome shows the internal review process working as intended. It is also evidence that proof soundness remains an unsolved engineering problem at the moment institutions are being told confidential execution is ready for them.