Aztec 2.0 rollup exploit (2026-06-17) follow-up: six wallets paid 1,101.9 ETH by consolidation 0x69923e52, then Tornado Cash and Relay
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: Aztec 2.0
- Reported: 2026-10-24
- Last updated: 2026-10-24
Follow-up to our report on the 2026-06-17 exploit of the deprecated Aztec 2.0 rollup contract (https://blockint.ai/c3?report=456a1937-0ccd-420c-998d-d71720ecb99e) and our follow-up that listed the attacker consolidation 0x69923e…5f72 (https://blockint.ai/c3?report=e36f0005-8afa-45c1-80b5-0378e787078e). That follow-up described six unlabeled wallets it paid but did not list them. On-chain data shows each one passing the ETH into Tornado Cash or a bridge within hours, so this report lists them. Addresses (Ethereum): - 0x7e7f606d871f1dca3efa2dee8b130cf864da70d8 -…
Other addresses in this report: 0xd5be113ed07f580e8545a3872af359215be057d5, 0x53c9293f03b3709e040f1d4bab7bf3968fc93c24, 0xa325e56d282bd753594fb37fd54aa1a6ca38a5b9, 0xf1bc80cf0e7474db75b32908fadbe16f92168854, 0x5c696a57636ea8837e6e6710def1877bf933e178
Linked reports: Aztec 2.0 rollup exploit (2026-06-17) follow-up: two attacker holding wallets and a copycat wallet named by Aztec Labs, Aztec 2.0 rollup exploit follow-up (2026-06-17): three onward wallets that moved the attacker's ETH, incl. a 10 ETH Tornado Cash deposit