News linked to both this project and an event.
according to Aztec Labs monitoring, the team is investigating a potential vulnerability affecting an Aztec payments product that was discontinued in 2021. Approximately $2 million was transferred from an immutable smart contract. This discontinued product is an immutable Stage 2 Rollup version that was deactivated in 2022. Aztec Labs does not hold the admin keys or any control over the system, and thus cannot pause or upgrade it. This incident is separate from the attack on the Aztec Connect product on June 14. The Aztec Foundation stated that the product affected by this attack is not associated with any smart contracts of the current network or the AZTEC ERC20 token.
According to an official announcement, Aztec Labs has acquired Obsidion—the team behind ZKPassport. The Obsidion team will continue developing ZKPassport while also leading the development of new consumer-facing products. The ZKPassport protocol will remain open-source. Aztec Labs stated that ZKPassport enables users to prove attributes such as age, nationality, or sanctions status using government-issued identity documents—without uploading any personal data to a server and without personal data ever leaving the user’s device. It already supports over 130 countries and regions and has been used for nationality and sanctions compliance verification in the Aztec Network token sale.