Search

New Release: 2.0.7-3

On Tuesday September 24th we released version 2.0.7-3 of Zcashd to address two security issues. Both were discovered and reported to us by Florian Tramèr, Dan Boneh, and Kenneth G.

Zcash Counterfeiting Vulnerability Successfully Remediated

Eleven months ago we discovered a counterfeiting vulnerability in the cryptography underlying some kinds of zero-knowledge proofs. This post provides details on the vulnerability, how we fixed it and the steps taken to protect Zcash users.|Eleven months ago we discovered a counterfeiting vulnerability in the cryptography underlying some kinds of zero-knowledge proofs. This post provides details on the vulnerability, how we fixed it and the steps taken to protect Zcash users.

Security Announcement 2017-04-13

Synopsis: A bug related to transaction priority handling may allow an attacker to crash Zcash nodes (DoS) via a specially crafted transaction. A fix is implemented in zcashd release 1.0.8-1.

Security Announcement 2017-04-12

Full announcement Please see the disclosure announcement. Update announcement We have deployed detectors to learn more about the issue and still have no evidence of malicious exploitation. We are working

Security Announcement 2016-11-22

Synopsis: A cache invalidation bug may allow an attacker to trigger a chain fork causing pre-1.0.3 nodes to follow an invalid chain. A fix is implemented in zcashd release 1.0.3.