Privacy-focused Ethereum Layer 2 project Aztec Network has suffered a bridge exploit that resulted in the loss of approximately $2.16 million in digital assets, according to blockchain security firm PeckShield.
The stolen funds included about 1,158 ETH worth roughly $1.8 million, 150,000 DAI, and 0.47 renBTC. PeckShield said the exploiter’s address was initially funded with 0.134 ETH originating from crypto exchange HitBTC.
This comes just three days after Aztec Connect flagged another possible security incident, where it reported unusual transfers from the same smart contract. At the time, the team confirmed it was investigating a potential exploit after approximately $2.1 million was transferred from the system and said the issue was still under review.
#PeckShieldAlert The @aztecnetwork Private Rollup Bridge has suffered an exploit, resulting in a loss of ~$2.165M worth of cryptos, including 1.158K $ETH, 150K $DAI & 0.47 $renBTC
The exploiter was originally funded with 0.134 $ETH from #HitBTC. pic.twitter.com/CHZOOQ1eDW
— PeckShieldAlert (@PeckShieldAlert) June 18, 2026
Millions drained from Aztec bridge
The attack targeted Aztec’s private rollup bridge, an important component that allows assets to move between networks. While details of the vulnerability have not yet been disclosed, the incident adds to a growing list of bridge-related exploits that have collectively cost the crypto industry billions of dollars over the past several years.
Bridge protocols have long been viewed as one of the most vulnerable areas of decentralized finance because they often hold large amounts of assets while relying on complex smart contract infrastructure. Even relatively small vulnerabilities can lead to significant losses if exploited successfully.
Aztec said it is currently investigating a potential exploit linked to a deprecated 2021 payments contract, noting that about $2 million was moved from an immutable smart contract in a specific transaction, according to its latest update.
The response may matter more than the size of the loss
Although the amount stolen is relatively small compared with daily trading volumes in major crypto markets, the incident could still weigh on user confidence. In previous bridge exploits, projects such as Wormhole, Poly Network, and Ronin Network showed that fast disclosure, visible recovery efforts, and clear communication can help limit long-term damage.
In cases like Wormhole, a rapid capital backstop helped restore user funds and stabilise trust. Poly Network saw most assets returned after coordinated on-chain tracking and public engagement with the attacker, while Ronin Network combined transparency with law enforcement involvement to recover part of the stolen assets. These responses helped prevent wider ecosystem collapse despite the scale of the breaches.
For Aztec, the next steps may matter more than the $2.16 million loss itself. How quickly the team identifies the vulnerability, communicates findings, and strengthens bridge security will likely determine whether the exploit remains contained or develops into a longer-term confidence issue for the network.
Meanwhile, PeckShield revealed that there was a sharp decline in crypto hack losses, dropping 60%. PeckShield emphasized the urgent need for better key management practices and comprehensive anti-scam education, especially since vulnerabilities in browser wallets remain a common entry point for attackers.
Enjoyed this? Bookmark DeFi Planet, explore related topics, and follow us on Twitter, LinkedIn, Facebook, Instagram, Threads and CoinMarketCap Community for seamless access to high-quality industry insights.
Take control of your crypto portfolio with DEFI PLANET PRO, DeFi Planet’s suite of analytics tools.
