TechFlow reported on June 18 that Aztec Labs said it is investigating a suspected exploit involving Aztec Payments, a product the team launched in 2021 and has since disabled. According to the company’s statement, about $2 million has been transferred out of the related immutable smart contracts.
Immutable contracts limit direct intervention
Aztec Labs described Aztec Payments as a Stage 2 Rollup product that stopped service in 2022. The team also said it does not hold admin keys for the system and has no system control, meaning it cannot pause or upgrade the relevant contracts or infrastructure.
The company further stated that this incident involving Aztec Payments is unrelated to the exploit of the already disabled Aztec Connect product on June 14, 2026. Aztec Labs said additional updates on the investigation will be announced separately.

