Публикация

Zcash Flash Crash: Critical Zero-Knowledge Bug, Market Panic, and Rapid Protocol Response Zcash saw a sharp drawdown of over 50% within 48 hours following the disclosure of a serious protocol vulnerability affecting its core privacy system. On May 29, security researcher Taylor Hornby identified a critical flaw in the Orchard zero-knowledge proof circuit during an audit for Shielded Labs. The issue, if exploited, could have allowed the minting of counterfeit ZEC inside the shielded pool without any detectable on-chain signature. What made the finding especially severe is its nature: a foundational cryptographic vulnerability in the system responsible for ensuring privacy and integrity. Had it been exploited earlier, it would have left no verifiable trace on-chain, making detection effectively impossible. The bug reportedly existed from the Orchard upgrade activation in May 2022 until an emergency patch was deployed on June 1, 2026—spanning roughly four years. However, no exploit was detected during that period, and Zcash’s turnstile accounting mechanism confirms that no unauthorized supply was created. Despite the absence of confirmed exploitation, market reaction was immediate and severe. Zcash peaked near $624 on June 4 before collapsing to around $264 following the disclosure, a drop of roughly 57% in a single day. Notable market participants reportedly reduced exposure amid the uncertainty, intensifying downside momentum. In response, the Zebra emergency upgrade was quickly deployed, with Shielded Labs proposing further protocol enhancements to formally strengthen supply verification. Additional ecosystem support has emerged, including backing for improved cryptographic safeguards and continued institutional interest in related products, even as short-term sentiment remains highly volatile. The central debate now revolves around whether the incident represents a contained vulnerability that was successfully mitigated—or a deeper structural risk exposure that could continue to weigh on confidence in privacy-focused cryptographic systems.