← The Polylog Crypto Intelligence Brief
Morning Edition · Tuesday, October 20, 2026Published at 1:39 AM EDT · New York
Aztec Discloses a Critical Proving-System Flaw in Alpha V5 and Says It Cannot Tell Whether Anyone Exploited It
The bug could let an attacker submit a forged proof that the network accepts, and the fix will arrive only with the V6 release.
Aztec, a privacy-focused layer-2 network on Ethereum, has disclosed a critical vulnerability in the proving system behind its Alpha V5 network. According to the team, an attacker may be able to construct a proof that passes verification for a transaction the network should reject. If the network accepted that proof, the transaction could alter state in ways that break Alpha V5's own rules.
Aztec says the flaw puts Alpha V5 funds, applications and contract state at risk. The team also says it cannot determine whether anyone exploited the bug before its own contributors found it. The system does not record enough information to separate ordinary transactions from transactions accepted through the flawed proving path. As a result, the chain's history cannot show whether an exploit happened or how much damage it caused.
This is a soundness defect, a different class of failure from a smart-contract exploit. In a privacy network, users generate proofs on their own devices, and the network checks only the proof itself. Validators never see the underlying data, so they cannot re-execute a transaction to catch a false proof. Aztec says findings from this incident will shape the upcoming V6 release, which will include circuit updates that stop the network from accepting proofs tied to the affected proving system. Reviewers have found no other high-severity or critical Alpha V5 issues so far.
Aztec has made this kind of disclosure before. It previously published a critical vulnerability disclosure for Alpha V4 and has since raised its total bug bounty to $2 million. The team describes the Alpha network as a testing ground meant to surface exactly these flaws. Developers have already deployed applications there, including an on-chain version of the Dark Forest game.
What this means
Anyone holding value or running applications on Aztec's Alpha network is exposed, and so, more broadly, is every privacy rollup whose security depends on a single proving system. A soundness bug in a shielded system is especially serious, because hidden balances can conceal counterfeit supply. The closest precedent is Zcash. In 2018, its developers found a counterfeiting flaw in the original Sprout parameters, fixed it quietly in the Sapling upgrade, and disclosed it in 2019. They could not prove from the ledger that no one had exploited it. Their fallback was turnstile accounting, which checks total value as funds leave the old pool. Analysts generally treat Alpha-stage bugs as routine. What sets this case apart is Aztec's statement that the chain's history cannot settle whether an exploit occurred. That makes migration accounting the real test of user trust, more than the patch itself. The more likely outcome is that V6 ships with a forced migration and some form of balance check at the boundary within months, while Aztec's timeline toward a production network slips later. If V6 ships without any public reconciliation of total supply, this read is wrong, and users would have only the team's word that balances are intact.
Part of a tracked trend
Proving-System Bugs Become a Distinct Rollup Risk
Soundness defects in zero-knowledge proving systems will keep surfacing as a risk class separate from smart-contract exploits, because validator re-execution — the fallback most rollups rely on — cannot catch them, forcing teams into embargoed disclosure timed to upgrades and pushing users toward proof-system diversity and escape hatches.
Townsquare
Start a discussion in Townsquare.
More from this edition
- Ethereum Sets October 26 for Glamsterdam's Final Test Run With a 200 Million Gas Limit as JPMorgan Moves JPM Coin to Mainnet
- Hacken Counts $1.18 Billion in Third-Quarter Crypto Losses, With Most Coming From Systems Outside Audit Scope
- Tether's Chief Executive Says His Company Freezes Iran-Linked Wallets Weeks Before the Treasury Does, Rebutting a Senate Staff Report
- The CFTC Tells a Federal Court That CME Has Shown No Harm From Its Approval of Crypto Perpetual Futures
- Ethereum Researchers Port Tornado Cash to a Post-Quantum Proof System as Aztec Sets a 2030 Migration Target
- Citi Research Names Aave as a Likely Financing Layer for Tokenized Assets
- French Lawmakers Vote 38 to 37 to Tax Crypto Swaps Into Euro-Regulated Stablecoins From 2027
Comments
1Oct 20, 5:39 AM
Because exploited and honest transactions cannot be told apart in the record, any carryover of Alpha V5 state into V6 would import balances whose validity cannot be proven.