Critical Zcash Vulnerability Found and Fixed

A security researcher found a critical vulnerability in Zcash’s Orchard shielded transaction pool. A missing enforcement in an input-validation check could have let an attacker create ZEC from nothing while zero-knowledge proofs still marked the transaction as valid.