2026-09-07

This month

Zero-knowledge proving system vulnerabilities disclosed in the last 24 hours

In the last 24 hours, a critical vulnerability affecting the V5 Alpha proving system of Aztec’s zero-knowledge protocol was disclosed. The flaw allows an attacker to construct a proof that bypasses ne…

RESEARCH: Zero-knowledge proving system vulnerabilities disclosed in the last 24 hours

RESEARCH: Zero-Knowledge Proving System Vulnerabilities Disclosed in the Last 24 Hours

Summary

In the last 24 hours, a critical vulnerability affecting the V5 Alpha proving system of Aztec’s zero-knowledge protocol was disclosed. The flaw allows an attacker to construct a proof that bypasses network validation for transactions the Aztec L2 should reject, potentially leading to unauthorized state transitions and compromising funds, applications, and contract states on the network. This incident highlights ongoing challenges in securing complex ZK‑rollup environments as they transition from alpha testing toward mainnet deployment.

Key Developments

  • 2026-09-07 — A core contributor team identified a critical vulnerability in Aztec’s Alpha V5 proving system, enabling fraudulent proofs that could violate intended transaction rules. The issue was discovered through internal AI‑assisted auditing and poses immediate risks to funds, applications, and contract states on the network. Aztec Network Blog
  • 2026-09-07 — Aztec announced the successful testing of the first decentralized upgrade process for an L2, involving over 100 sequencers, marking a significant step toward full decentralization and programmable privacy on Ethereum. Aztec Network Blog
  • 2026-09-07 — The Aztec Public Testnet opened to developers for the first time, allowing them to build fully private applications on Ethereum using Aztec’s privacy stack, including Noir and PLONK proving systems. Aztec Network Blog

Sources