brief -
Aztec Network Relaunches ZK Money
ZK.Money is now an open-source, self-custodial privacy wallet built on the Aztec privacy-preserving rollup.
Happy Tuesday, September 29, 2026.
Aztec Network relaunches its ZK Money app. Glamsterdam is now scoped in the Ethereum Foundation's $1m bug bounty. The Balancer DAO approves a wind down. And Payy shares its bridge hack post-mortem.
Aztec Network Relaunches ZK Money
Aztec Network relaunched its ZK.Money product as an open-source, self-custodial privacy wallet built on its privacy-preserving rollup. The original zk.money app on Aztec Connect, which allowed users to deposit funds into an early version of the network, was shut down in March 2024. The relaunch is an entirely new product; accounts and funds from the earlier instance do not carry over.
According to Aztec, balances, amounts, counterparties, and transaction history within ZK.Money are private, while deposits and withdrawals remain public. The wallet allows users to register a public tag, which is an ENS-powered username. Users can then send and receive funds between each other using the public tags. The wallet initially supports DAI deposits. Gas fees are also sponsored on internal transfers. Aztec takes a fee on deposits and withdrawals from L1 towards a fee-paying contract.
Glamsterdam Scoped In Bug Bounty
Glamsterdam, Ethereum's next upgrade expected by year-end, is now partly in scope for the Ethereum Foundation's Bug Bounty Program. The upgrade includes 18 EIPs, with enshrined proposer-builder separation (ePBS) and block-level access lists (BALs) as headliners. Researchers can earn up to $1 million for eligible bugs. For now, only Glamsterdam specifications and EIPs qualify.
The broader scope begins when release candidates are announced on the Ethereum Foundation blog. The current 0.5x reward period covers Medium, High, and Critical findings through the scheduled Sepolia upgrade, with the specifications and EIPs already eligible. The multiplier rises to 2.0x from 24 hours after the Sepolia upgrade epoch finalizes until the Hoodi upgrade, then becomes 1.5x until one week before the scheduled mainnet upgrade.
Balancer Proceeds With Wind Down
BAL token holders approved Balancer's orderly wind-down proposal, while a proposal to fork the protocol did not pass. The vote sets the wind-down in motion. On October 30, 2026, Balancer pools will move to withdrawals-only mode, and the V3 Vault is scheduled to pause on November 30. Liquidity providers can withdraw at any time. Balancer will publish guides on how to exit positions through its app, third-party tools, and directly through contract calls.
No action is required for BAL token holders until the end of May 2027, when they will be able to burn BAL for a pro rata share of the DAO treasury, with the exact date to be announced at least two weeks in advance. Holders of tetuBAL will receive BAL equal to 50% of the amount locked behind their tokens.
Misc News
Payy publishes its bridge exploit post-mortem, pointing to a proving-system vulnerability in the Noir/Barretenberg verifier, developed by Aztec, as the root cause.
The Payment Processor V2 exploit remains ongoing; users are urged to revoke approvals. Ambire shares a guide for managing a Safe multi-sig.
Aero adds new Coinbase Tokenized Stocks. The Ethereum Foundation donates $100,000 to Vyper for building a Formally Verified Vyper Compiler. And Robinhood hosts HOOD Summit.
Disclaimer: Content is for informational and educational purposes only and does not constitute financial, investment, legal, or other professional advice. No representations or warranties are made as to accuracy, completeness, or timeliness. Use of this content at your own risk.
