Aztec's Tierra V6 Lets Users Prove Funds Untied to Lazarus Group Hacks

Serial Numbers Screen Out Lazarus Deposits

Aztec co-founder Zac Williamson explained on Saturday how users of the Aztec Network can show their funds have no connection to deposits attributed to North Korea's Lazarus Group, and how that proof works without exposing any other part of their transaction history. The mechanism, laid out in an interview published on November 14, rests on serial numbers attached to notes, the private units that hold value on the protocol. Williamson presented the design against the backdrop of persistent concern over how stolen funds from Pyongyang-linked operations move and get laundered through the wider market.

Value on Aztec is split into individual notes rather than a single account balance, a structure Williamson compared to Bitcoin's unspent transaction output (UTXO) model, in which every output is tracked as its own spendable unit. Because checks run at the note level, a tainted note delivered through a dusting attempt cannot pull the rest of an account under suspicion; the funds outside that one note keep a clean origin. The interview material framed this property as protection that stops a dusting attack from contaminating everything else a user holds on the protocol.

The proof itself follows a privacy pools-style construction: a user presents evidence that their notes do not appear on a list of flagged deposits tied to groups such as Lazarus. Williamson was careful about scope. The demonstration covers only whether specific funds overlap with that flagged list, and it does not amount to identity verification or to automatic blocking of transactions.

Disclosure is a separate and selective matter. A user can share their full transaction record with a party they designate, such as the US Internal Revenue Service, through a per-account view key. Williamson distinguished that arrangement from a common audit key that would open every user's activity to a single observer, and the design means nobody has to surrender a private key to a global auditor. The choice of who sees what stays with the account holder.

Tierra V6 Doubles Proving Speed

The conversation centered on Tierra, the V6 upgrade to Aztec's private, fully decentralized layer 2, which settles on Ethereum's layer 1. Performance moved on two measurable fronts. According to the official introduction released on November 3, the bridge protocol relaying messages from Ethereum into Aztec cut delivery from an average of two minutes to as fast as 12 seconds, and proving of private transaction proofs now runs twice as fast as in the previous version. Those figures frame the upgrade's case rather than replacing its security story.

That security work preceded the release. Aztec operates a 24/7 AI audit harness that Williamson said surfaced critical vulnerabilities in the project's cryptographic libraries, the components that implement the system's information protection. Formal verification, a procedure that checks whether a system satisfies defined mathematical conditions, was then applied to those components, and he said the exercise raised his confidence in V6. The official release notes state that Tierra also fixed a critical vulnerability in the previous version's proof system.

Governance follows a Stage 2 rollup design in which sequencers post stakes, forfeit them if they break the rules, and vote on upgrades; a security council is not part of the process. To limit the blast radius of a hard-to-detect double-spend bug, Aztec adopts a Zcash-style turnstile approach. Launch targets on the network include zk.money, a private AI inference marketplace, and an anonymous social network backed by Ethereum bonds. Williamson argued that privacy features succeed when a product cannot exist without them, so users opt in because the function is essential rather than decorative.

The serial-number proof is the piece regulators and exchanges will test first. A protocol that lets an account clear itself against a sanctions-linked deposit list, while keeping a global auditor key out of the design, offers a path between full transparency and delisting pressure. Acceptance is unproven: no source in this story reports an exchange or regulator adopting note-level proofs, and the interview describes capability, not adoption. The Stage 2 sequencer set is the second test. Staking, slashing and upgrade votes without a security council shift enforcement onto protocol rules, and the 12-second message delivery gives that design a performance argument. Whether both hold up under real sanctions screening is the open question for Aztec heading into 2027.