ZODL创始人：Zcash原节点软件zcashd运行十年后已正式“退役”
Related
ZODL founder and Zcash developers will hold a meeting in the coming weeks with the goal of "breaking down all barriers."
According to Foresight News , Josh Swihart, founder and CEO of the Zcash Open Development Lab (ZODL), tweeted that Zcash developers will hold a meeting in the coming weeks with the core goal of "Breach all gates." Meanwhile, the ZODL team released its weekly report, with key updates including the release of Zodl Mobile version 3.7.0 (enhancing network resilience, completing large-scale security hardening for Android, fixing multiple transaction status and sending bugs, and integrating the Maya DEX aggregator via Swapkit); and the release of Zallet version 0.1.0-alpha.4 (adding a Zebra state backend, several new RPC methods, and built-in encrypted identity commands).
ZODL CEO: The size of the Zcash shield pool has decreased to 30% in the past 48 hours.
According to Foresight News , Josh Swihart, founder and CEO of Zcash Open Development Lab (ZODL), tweeted that due to the FUD caused by the Zcash Orchard pool vulnerability, the size of the Zcash shielded pool has dropped to 30% in the past 48 hours.
Zcash releases Zebra 4.5.0, a node client that fixes several security issues, including a consensus-level vulnerability.
According to Foresight News , the Zcash Foundation has released version 4.5.0 of the Zebra node client, fixing several security vulnerabilities, including a critical consensus-level vulnerability. The foundation strongly recommends that all node operators upgrade immediately. The highest-risk vulnerability patched in this update (GHSA-gf9r-m956-97qx) involves a pure Rust script parser incorrectly short-circuiting the signature operation count when processing P2SH redemption scripts. This causes Zebra to accept blocks rejected by zcashd, potentially leading to a chain split. In addition, this update also fixes nine high- to medium-risk vulnerabilities, including block retry suppression, address balance overflow causing node crashes, memory pool queue saturation, and synchronous restart poisoning, as well as three low-risk vulnerabilities. The new version also adds support for mining to shielded addresses. This patch covers over 80 security reports received during the ZCG vulnerability disclosure program (April to May).
ZODL has proposed launching a new privacy pool, Ironwood, with plans to activate and enhance Zcash security by the end of July 2026.
ChainCatcher reports that ZODL, a core contributor to the Zcash ecosystem, has announced a new network upgrade solution and privacy pool, Ironwood, in collaboration with Tachyon, Valar Group, Zcash Foundation, and Shielded Labs. Ironwood will be built on the existing Orchard protocol and further enhanced for security through formal verification and additional independent audits.
The Zcash Foundation released Zebra 4.5.1, fixing a critical security vulnerability in its consensus mechanism.
According to Foresight News , the Zcash Foundation has released Zebra version 4.5.1, fixing a critical consensus security vulnerability (GHSA-2prc-cj5x-4443). All node operators are strongly advised to upgrade immediately. This vulnerability stems from an incomplete fix in the previous version (4.5.0) regarding the P2SH Sigop counting issue, which still poses a risk of consensus fork. Currently, there is no known workaround; upgrading is the only solution.
Zcash completes NU 6.2 hard fork, fixing Orchard pool vulnerability.
According to Mars Finance, on June 3rd, the Zcash (ZEC) Foundation officially announced that independent security researcher Taylor Hornby discovered a serious reliability vulnerability in Zcash's Orchard zero-knowledge proof circuit on May 29th, potentially allowing double-spending within the Orchard pool. ZODL core engineers confirmed the issue and initiated a fix within hours. To buy time, an emergency soft fork of Zebra 4.5.3 was used to temporarily disable Orchard operations in the early morning of June 2nd. Finally, today, a hard fork of Zebra 5.0.0 activated NU6.2 – at 12:05 PM Beijing time, the mainnet successfully completed the upgrade at block height 3,364,600, re-enabling Orchard with the corrected circuit, and the vulnerability was permanently closed. This is the second time since Zcash's launch in 2016 that a security issue has triggered a protocol upgrade. No known exploits occurred throughout the process, the network's total supply safeguard mechanism confirmed that the total supply remained intact, and user privacy, sapling, and transparent transactions were unaffected.