In a latest tweet, Zcash Open Growth Lab (ZODL) shares a safety disclosure concerning vulnerabilities in zcashd and Zebra, which have been found and patched, together with a bug that would crash nodes dealing with sure Orchard transactions.
On this mild, ZODL acknowledged that it has launched zcashd v6.12.1, and the Zcash Basis has launched Zebra v4.3.1, addressing 4 vulnerabilities, together with an Orchard action-encoding bug that would crash nodes and a associated consensus-split subject between the 2 purchasers.
Safety Disclosure: We have launched zcashd v6.12.1, and the Zcash Basis has launched Zebra v4.3.1, addressing 4 vulnerabilities – together with an Orchard action-encoding bug that would crash nodes and a associated consensus-split subject between the 2 purchasers.
Mining swimming pools…
— Zcash Open Growth Lab (@zodl_co) April 17, 2026
A number of vulnerabilities in zcashd and Zebra have been found and patched, together with a bug that would crash nodes dealing with sure Orchard transactions, a consensus enforcement hole between the 2 implementations that would have triggered a series fork, a bug that would disable enforcement of zcashd’s turnstile accounting and undefined habits as a result of unchecked integer arithmetic in pool stability calculations.
Mining swimming pools working each implementations have already deployed patches, with no proof that any of the bugs have been exploited.
As well as, the vulnerabilities weren’t exploited to have an effect on the consensus chain. Zcash maintains that each one consumer funds stay secure, and consumer privateness was not in danger. None of those vulnerabilities may by themselves have been used to inflate the $ZEC provide.
Each zcashd and Zebra required patches and have been up to date in coordination earlier than public disclosure.
Mining swimming pools representing a supermajority of the community’s hash energy and the first operator working Zebra in mining manufacturing deployed patches earlier than the disclosure.
Zcash information
Zcash Shielded pool not too long ago hit an all-time excessive, 31% of all $ZEC is now within the encrypted pool. A yr in the past, it was 11%, however now 59% of transactions are shielded.
Zcash is actively testing NIST-standardized lattice-based cryptography (ML-KEM, ML-DSA) in a bid for post-quantum readiness. This comes after Google’s March 31 paper confirmed quantum threats are 20x nearer than anticipated.
Zcash Community’s hash fee additionally set a brand new all-time excessive at 16.54 GS/s, indicating miners’ dedication greater than ever.
