Critical Zcash Vulnerability Found and Fixed

· Bruce Schneier · June 8, 2026, 5:20 p.m.
Summary
A critical vulnerability was discovered and fixed in the Zcash Orchard privacy pool by researcher Taylor Hornby. This vulnerability, if exploited, could have allowed attackers to generate ZEC fraudulently. The issue was due to a validation check not enforcing its intended rules.
AUTHOR
Sponsored
Zulip logo Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →