ZEC Price Drops After Disclosure of Patched Zcash Orchard Counterfeiting Vulnerability
By
@cointelegraph
Pulled from the oven just right. Trustworthy, fact-dense, deeply satisfying.
Summary
A critical counterfeiting vulnerability was discovered in Zcash's Orchard pool by security engineer Taylor Hornby on May 29, which could have allowed a bad actor to mint unlimited ZEC. The bug was disclosed to Zcash Open Development Lab (ZODL), which deployed an emergency hard fork fix on June 3. Following the public disclosure of details, ZEC's price fell on Thursday. New concerns have emerged about the extent of potential prior exploitation, as the vulnerability had existed since the Orchard pool's launch and left no cryptographic evidence of exploitation.
Key quotes
· 3 pulledAccording to a post on X, security engineer Taylor Hornby, who was engaged by Shielded Labs, discovered the bug on May 29 and disclosed it to the Zcash Open Development Lab (ZODL), which deployed an emergency response to fix the vulnerability with a hard fork activated on June 3.
The price of ZEC fell on Thursday after further details were disclosed of a critical counterfeiting vulnerability in Zcash's Orchard pool that could theoretically allow a bad actor to mint an unlimited amount of ZEC.
However, there are new concerns about the extent to which the vulnerability, which has existed since Ma
You might also wanna read
Malicious Backdoor Discovered in XZ Utils Compression Software Affecting Linux Systems
The article details the discovery of a sophisticated backdoor in the XZ Utils compression software, a critical open-source component used in
en.wikipedia.org·5mo ago
Hacker Exploits Resolv Labs Smart Contract, Mints $80 Million in Fake Stablecoins
A hacker exploited a bug in Resolv Labs' smart contract to mint approximately $80 million worth of unbacked USR stablecoins. The protocol's
bfmtimes.com·2mo ago
A critical OpenZFS bug: how a trivial error caused devastating consequences
The article describes a critical bug discovered and fixed in OpenZFS, a popular filesystem. The bug involves a function that converts betwee
The 2010 Bitcoin Bug That Created 184 Billion Coins Out of Thin Air
In August 2010, a hacker exploited a bug in Bitcoin's early code to create 184 billion Bitcoin out of thin air, completely bypassing the 21
decrypt.co·10mo ago
GitHub patches critical remote code execution vulnerability in under six hours after AI-assisted discovery
GitHub patched a critical remote code execution vulnerability in under six hours last month. The flaw, discovered by Wiz Research using AI m
The Verge·1mo ago
Ongoing Cybersecurity Threat: XZ Utils Backdoor Persists in Docker Images
The article discusses the lingering threat of the XZ Utils backdoor, initially discovered in March last year, which was inserted into the li
binarly.io·9mo ago