Aztec Connect’s abandoned smart contract exploited for $2.1M

An abandoned smart contract for the Aztec Connect platform was exploited for $2.1 million in cryptocurrency assets on May 23, 2024. Aztec Connect, a privacy-focused layer-2 scaling solution for Ethereum, was officially deprecated in March 2023, meaning its active development and support ceased. Despite its deprecation, the smart contract remained on the Ethereum blockchain and continued to hold a significant amount of digital assets. The exploit targeted a vulnerability within this legacy contract, allowing the attacker to drain the funds. The exact nature of the vulnerability has not yet been detailed by security researchers, but the incident highlights the persistent risks associated with dormant smart contracts that still hold value. This event underscores the importance of thoroughly decommissioning and auditing smart contracts, even after a platform has been shut down, to prevent such financial losses. The stolen funds were reportedly moved to a new address controlled by the exploiter.