Ripple Proclaims New Institutional Era for XRP
Ripple heralds a new institutional era for XRP with spot ETFs and regulatory clarity.
U.Today1 min read
Zcash Releases Critical Fixes After Node Crash and Network Risks
TL;DR
Zcash has released critical updates to zcashd v6.12.1 and Zebra v4.3.1 to fix vulnerabilities that could crash nodes and cause consensus issues. The updates address four major bugs, ensuring network stability and security.
Key points
- Zcash released zcashd v6.12.1 and Zebra v4.3.1.
- Updates address four vulnerabilities including a node crash bug.
- Mining pools have deployed patches with no evidence of exploitation.
Mentioned in this story
Zcash Open Development LabZcash Foundation
In a recent tweet, Zcash Open Development Lab (ZODL) shares a security disclosure regarding vulnerabilities in zcashd and Zebra, which were discovered and patched, including a bug that could crash nodes handling certain Orchard transactions.
In this light, ZODL stated that it has released zcashd v6.12.1, and the Zcash Foundation has released Zebra v4.3.1, addressing four vulnerabilities, including an Orchard action-encoding bug that could crash nodes and a related consensus-split issue between the two clients.
Security Disclosure: We've released zcashd v6.12.1, and the Zcash Foundation has released Zebra v4.3.1, addressing four vulnerabilities – including an Orchard action-encoding bug that could crash nodes and a related consensus-split issue between the two clients.
Mining pools…
— Zcash Open Development Lab (@zodl_co) April 17, 2026
Several vulnerabilities in zcashd and Zebra were discovered and patched, including a bug that could crash nodes handling certain Orchard transactions, a consensus enforcement gap between the two implementations that could have triggered a chain fork, a bug that could disable enforcement of zcashd’s turnstile accounting and undefined behavior due to unchecked integer arithmetic in pool balance calculations.
Mining pools running both implementations have already deployed patches, with no evidence that any of the bugs were exploited.
In addition, the vulnerabilities were not exploited to affect the consensus chain. Zcash maintains that all user funds remain safe, and user privacy was not at risk. None of these vulnerabilities could by themselves have been used to inflate the ZEC supply.
Both zcashd and Zebra required patches and were updated in coordination before public disclosure.
Mining pools representing a supermajority of the network’s hash power and the primary operator running Zebra in mining production deployed patches before the disclosure.
Zcash news
Zcash Shielded pool recently hit an all-time high, 31% of all ZEC is now in the encrypted pool. A year ago, it was 11%, but now 59% of transactions are shielded.
Q&A
What vulnerabilities were fixed in Zcash's recent updates?
The updates fixed a bug that could crash nodes handling Orchard transactions, a consensus enforcement gap, and issues related to turnstile accounting and integer arithmetic.
What versions of Zcash were released to address the vulnerabilities?
Zcash released zcashd v6.12.1 and Zebra v4.3.1 to address the identified vulnerabilities.
Have any of the vulnerabilities in Zcash been exploited?
There is currently no evidence that any of the vulnerabilities were exploited before the patches were deployed.
