News linked to both this project and an event.
According to analysis by BlockSec Phalcon (@Phalcon_xyz), Aztec Network's RollupProcessorV3 contract was attacked, resulting in losses exceeding $2.15 million. The root cause is that `numRealTxs` was not effectively bound to the transaction set enforced by the ZK proof, causing a deviation between the proof verification path and the L1 settlement logic's interpretation of the transaction list.The attacker exploited this vulnerability to move real deposits to slots not processed by the settlement logic, bypassing the `decreasePendingDepositBalance()` function. By creating unbacked private balances out of thin air, they were able to withdraw funds through the normal settlement process. A total of seven assets were involved.
According to Specter (@SpecterAnalyst), Humanity Protocol has been hacked, with losses exceeding $31 million. Funds are still being transferred, and the attacker is converting H into ETH.
Wallets associated with or interacted with Humanity Protocol are being compromised. Currently, over 17 wallets holding H tokens have been stolen, with total losses exceeding $19 million. The cause of the theft remains unclear, but the attack pattern suggests that the affected wallets may share a common risk exposure related to Humanity Protocol.
On-chain investigator ZachXBT stated that THORChain appears to have been attacked on the Bitcoin, Ethereum, BSC, and Base networks, resulting in losses exceeding $7.4 million.
According to on-chain detective ZachXBT, THORChain has suffered an attack across multiple chains, resulting in losses exceeding $7.4 million.