The Zcash vulnerability has been fixed, but it previously put $6.5 million worth of ZEC at risk.

金色财经_ · 2026-04-01T03:10:50+00:00

Security researchers have discovered a serious vulnerability in Zcash nodes that could be exploited by malicious miners to extract large amounts of ZEC from the deprecated Sprout privacy pool. Although it has not been exploited, all user funds are safe. The development team has released a fix, and major mining pools have quickly deployed the patch.

金色财经_

2026-04-01 03:10:50

Abstract generation in progress

Golden Finance reports that on April 1, a security researcher discovered a serious vulnerability in Zcash nodes that, in theory, could be exploited by malicious miners to extract more than 25,000 ZEC from the now-discontinued Sprout privacy pool, which is worth about $6.5 million at current prices. According to a disclosure report published on Tuesday, researcher Alex “Scalar” Sol disclosed the vulnerability on March 23, pointing out that when handling transactions involving the legacy Sprout privacy pool, the zcashd node skipped the proof verification step. The report said the vulnerability was not exploited, and all users’ funds remain safe. The vulnerability affects versions from the one released in July 2020 up to the present. The Zcash development team released version v6.12.0 on Tuesday to fix it. Major mining pools also moved quickly to complete patch deployment—Luxor pool confirmed the fix on March 25, and F2Pool, ViaBTC, and AntPool all completed the fix by March 26.

ZEC6.74%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.