Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Analysis of the $2.19 Million Asset Theft from Aztec Connect
Excerpt
Analysis of the $2.19 Million Asset Theft from Aztec Connect: ZK-Rollup Settlement Boundary Bypass Leads to L1/L2 State Discrepancy Background On June 14, 2026, the deprecated Aztec Connect RollupProcessor contract (0xff1f2b4adb9df6fc8eafecdcbf96a2b351680455) was exploited. The attacker constructed a boundary gap between numRealTxs and decoded_slots, extracting approximately $2.19 million worth of assets from the L1 pool in a single atomic transaction. Aztec Connect was…
Read the original report →Attack Flow8 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | 06f585f74e0da633ae813a0f23fb9900b61d0fcd | Medium | Score 53/100 | First seen |
| SHA1 | 0f18d8b44a740272f0be4d08338d2b165b7edd17 | Medium | Score 53/100 | First seen |
| SHA1 | ff1f2b4adb9df6fc8eafecdcbf96a2b351680455 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…