Morning Edition · Saturday, October 24, 2026Published at 1:47 AM EDT · New York
The privacy rollup links the plan to a critical V5 proving flaw that its own AI-assisted audit found, an issue whose exploitation cannot be confirmed or ruled out from the chain's history.

Aztec, a privacy-focused layer-2 network on Ethereum, has published a post-quantum roadmap that targets full migration by the end of 2030. The schedule reported by KuCoin runs as follows. Hardened developer libraries come in February 2027. The team will select a post-quantum signature scheme in March, a public-key encryption scheme in July, and a post-quantum proving system in November.
Aztec says its current design already protects past private data against some "harvest now, decrypt later" attacks, where an adversary stores encrypted data today to break it later. The team says full quantum security still requires changes to applications, account authentication, key derivation, validator signatures, zero-knowledge proving and settlement on Ethereum. It also says the whole stack will have to be formally verified because AI now makes finding and exploiting bugs much easier.
The commitment follows a vulnerability Aztec found in its own system. Core contributors found a critical vulnerability in the Alpha V5 proving system on July 27 through internal AI-assisted auditing. The flaw could let an attacker build a proof that passes verification for a transaction the network should reject. Aztec said the system does not record which proofs went through the flawed path, so historical activity cannot show whether anyone exploited it. The team is working with operators, application teams and bridge operators to add safeguards around affected flows. The upcoming V6 release includes circuit changes that stop the network from accepting proofs tied to the affected proving system.
What this means
A soundness bug in a proving system is different from a contract exploit. Validators that only check proofs cannot catch it, and it can leave no forensic trace. Aztec says it cannot rule out exploitation. Its answer has two parts: retire the affected proof path in V6, and formally verify every future component, including new post-quantum primitives that have little production history. The exposed parties are users and bridges holding value on V5, plus any rollup whose safety depends on one proving system without a re-execution fallback. The market already expects quantum-resistance roadmaps. The new element is that a privacy chain is setting the pace of its migration by verification capacity, not by the quantum threat timeline. That makes the 2030 date sensitive to slippage at each selection milestone. The likelier outcome over the next year is that other zero-knowledge rollups announce formal-verification programs and multi-proof designs, and that institutional users treat a published verification scope as a listing condition. The read would be proven wrong if Aztec misses the March 2027 signature-scheme milestone without explanation, which would show the roadmap is aspirational.
Part of a tracked trend
Proving-System Bugs Become a Distinct Rollup Risk
Soundness defects in zero-knowledge proving systems will keep surfacing as a risk class separate from smart-contract exploits, because validator re-execution — the fallback most rollups rely on — cannot catch them, forcing teams into embargoed disclosure timed to upgrades and pushing users toward proof-system diversity and escape hatches.
Start a discussion in Townsquare.
More from this edition
What to watch
Observations to monitor, not financial advice.
Synthesized from: Aztec Network (Post-Quantum Aztec) · Aztec Network (Alpha V5 vulnerability) · Aztec Network (Alpha V5) · KuCoin
Comments
0No comments yet.