Zcash Vulnerability Exposed: Four-Year-Old Bug Raises Concerns

A significant vulnerability in the Zcash (ZEC) cryptocurrency's Orchard shielded pool has been discovered. The bug, which existed since the launch of Orchard in 2022, could have allowed invalid transactions and potentially enabled counterfeit coin creation or double-spend-like behavior within the pool.

Developers responded quickly to the discovery by implementing emergency upgrades, and they claim that there is no evidence of exploitation or unauthorized value creation. However, due to the privacy design of Orchard's shielded pool, it is impossible to definitively prove that the bug was never exploited before it was patched.