Security

Audit

Audited by Nethermind Security (NM-0756, May 2026): 1 critical, 2 high, 3 medium findings — all resolved before deployment.

Known Aztec Alpha Risk

Aztec Labs disclosed a critical vulnerability in barretenberg affecting Alpha v4. This could allow proof fabrication, putting funds in Aztec’s private state at risk. Fix ships with Aztec v5 (~July 2026). Until then, treat Aztec Mainnet Alpha as early-stage and bridge only amounts you can afford to lose.

Production Status

• Real ZK proofs enabled in production since 2026-05-29
• Aztec Mainnet Alpha undergoing continuous audits + bug bounty
• ~6s block times at 1 TPS, blocks bundled into checkpoints settled to L1 every ~72s
• Throughput improves toward Aztec v5

Privacy

No PII stored at rest by bridge, human.tech, or Aztec. Identity data transits KYC and sanctions screening providers during verification, then is discarded. On-chain identity verification uses zero-knowledge proofs; no personal data appears on blockchain.

Source Code

Open source: github.com/holonym-foundation/aztec-bridge