CoinDesk
Zcash plunged 37% on Tuesday after Shielded Labs disclosed a critical vulnerability in ZEC's Orchard privacy pool that could have allowed an attacker to mint unlimited, undetectable counterfeit tokens. The flaw has existed since Orchard activated in May 2022 and was patched in an emergency fix on June 1.
Why it matters
The vulnerability was discovered on May 29 by security engineer Taylor Hornby using Anthropic's Opus 4.8 AI model. Shielded Labs says there is no cryptographic way to determine whether the bug was exploited before the patch landed, leaving ZEC's circulating supply integrity formally unverified for roughly four years. The team is proposing a network upgrade with new accounting measures and expanded security efforts to restore confidence.
Market impact
The disclosure hit ZEC harder than the broader crypto market, dragging BTC sentiment with it as Bitcoin slipped toward the $60,000 threshold. A counterfeiting bug in a privacy pool is the worst-case scenario for a supply-capped asset: even the theoretical possibility of unbounded minting breaks the hard-money thesis. The 37% one-day drawdown ranks among Zcash's worst single-session slumps, with bulls exiting positions rather than waiting for the proposed upgrade.
Frequently asked questions
-
What is the Zcash Orchard privacy pool bug?
A critical vulnerability in Zcash's Orchard shielded pool could have allowed an attacker to mint unlimited, undetectable counterfeit ZEC tokens. The flaw existed since Orchard activated in May 2022 and was patched in an emergency fix on June 1.
-
Who discovered the Zcash Orchard bug?
Security engineer Taylor Hornby discovered the vulnerability on May 29 using Anthropic's Opus 4.8 AI model. Shielded Labs disclosed the issue shortly after and pushed an emergency patch within three days.
-
Was the Zcash bug exploited before the fix?
Shielded Labs says there is no cryptographic way to determine whether the flaw was exploited before the June 1 patch. ZEC's circulating supply integrity therefore remains formally unverified for roughly four years.
-
How much did Zcash drop on the news?
ZEC fell 37% in one of the token's worst single-session drawdowns after the disclosure. The move dragged broader crypto sentiment, putting Bitcoin on watch for a slide toward $60,000.
-
What is Shielded Labs doing to fix ZEC's supply confidence?
Shielded Labs is proposing a network upgrade with new accounting measures and expanded security efforts. The goal is to restore confidence in ZEC's supply integrity after four years of theoretically unbounded minting exposure.
Crypto Rank News
CryptoSlate
WatcherGuru
Crypto News
WuBlockchain
TheBlock
CoinTelegraph