April 2, 2026

Capitalizations Index – B ∞/21M

ZCash Fixes Counterfeit Bug

ZCash Fixes Counterfeit Bug

A bug that would have allowed attackers to create unlimited ZCash counterfeits was discovered and fixed in 2018, ZCash management announced on February 5, 2019.

A Glitch in the System

ZCash has announced that a vulnerability in their system which would have allowed the infinite mining of coins by attackers has been fixed. The announcement was made on February 5, 2019, via a blog post.

The bug was first discovered on March 1, 2018, Ariel Gabizon, a cryptographer at ZCash; the flaw in question was in the zk-SNARK construction that was used in the original ZCash launch transcript which would have allowed the creation of a  counterfeit shielded value in systems that used the parameters described in the paper.

Fixing the Problem

It had gone undetected for years at that point, even though several reviews of the system has taken place. After Gabizon found the vulnerability, she reported it to Sean Bowe, another cryptographer at ZCash a day before the Financial Cryptography 2018 conference, where Bowe was a speaker. Bowe then reported the findings to Zooko Wilcox, the CEO of the Zcash Company and Nathan Wilcox, the CTO of ZCash Company.

The vulnerability was then taken care of without anyone other than these four people knowing about it. The fix was included in the Sapling network upgrade which went live on October 28, 2018, and the transcript was removed from public access. A backup copy of the transcript was initially kept by Zooko and Nathan but was eventually destroyed.

Also, it turns out that ZCash wasn’t the only network that had the same issues, as the Horizon and Komodo Blockchains were plagued by the same bug. ZCash has since reached out to the management of those blockchains and they have reportedly taken action. The three firms had signed a disclosure agreement to keep the matter private while the vulnerability was resolved. However, a 90-day maximum public disclosure timeline was created and support was given by ZCash to resolve the bug. There were also fears that public disclosure of the problem could increase the risk of exploitation.

As per the update post:

“It appears that both Horizen and Komodo have taken appropriate actions per our recommendation. We recommend that third parties including affected projects, wallets, and exchanges, carefully consider how best to work through the upgrades needed to fix this issue,”

Zcash fixes counterfeit bug

Like BTCMANAGER? Send us a tip!
Our bitcoin Address: 3AbQrAyRsdM5NX5BQh8qWYePEpGjCYLCy4

Published at Wed, 06 Feb 2019 21:00:36 +0000

Previous Article

ZCash Fixes Counterfeit Bug

Next Article

LITECOIN 2019 – Privacy, Lightning Network, UFC, Charlie Lee Cryptocurrency

You might be interested in …

Private Capital Market Ecosystems Meet the Blockchain

Private Capital Market Ecosystems Meet the Blockchain

In a move signaling blockchain technology’s continued advancement in the financial world, Hong Kong–based PrivateMarket.io and NY-based Symbiont announced an agreement to build an alternative investment marketplace for closed-end funds utilizing Symbiont’s SmartSecuritiesTM software. The parties anticipate that the marketplace will go live in late 2017.

PrivateMarket’s strategic intent is to ensure that a new generation of wealth managers are able to access, analyze and seamlessly execute primary and secondary market transactions online. Through technology, they deliver concrete solutions that foster a more transparent and efficient private capital market ecosystem.

In a statement, Loïc Engelhard, founder and CEO of PrivateMarket.io, said he welcomed the partnership, noting that the security and privacy elements being delivered by Symbiont are of paramount importance for his company’s success. In particular, he touted the ease of integration and fit of Symbiont with their own internal processes at PrivateMarket.  

Symbiont is largely known for a smart-contracts platform that tethers to institutional applications of distributed ledger technology. Its growing number of disclosed users include 19 financial institutions for Smart Loans™, arranged by Credit Suisse and executed via Synaps; its syndicated-loans joint venture with Ipreo; the State of Delaware for Smart Records™; a major European insurance company for Smart Swaps™ in the catastrophe insurance market; and Orebits, a provider of asset digitization services. The company’s technology has also been used in markets for syndicated loans and digitized gold claims.

Symbiont was started in early 2015 by Mark Smith, Adam Krellenstein, Evan Wagner and Robby Dermody — all of whom have extensive track records in the bitcoin/blockchain space as well as in fintech. Prior to Symbiont, the trio of Krellenstein, Wagner and Dermody founded Counterparty, the “bitcoin 2.0” open-source project targeting digital representation of non-bitcoin assets on the bitcoin blockchain.

In August of 2016, Caitlin Long, a Wall Street veteran of over 22 years, joined Symbiont as chairman of the board and president, assuming responsibility for Symbiont’s commercialization, business strategy and client relationship efforts.

In an interview with bitcoin Magazine, Long discussed how Symbiont’s new partnership with PrivateMarket is designed to provide an enhanced and efficient approach to private capital markets, with private equity and real assets as a main focus.

“The implementation of our blockchain and Smart Contracts solution will increase efficiency, transparency and the speed of the transactions in the antiquated over-the-counter market. It will also improve greatly the security of the private equity market by simplifying complex and highly manual bilateral contracts.”

She also noted that unlike the current state in private equity, where unlisted (investment) vehicles exist, Symbiont’s solution will greatly improve the liquidity of asset classes through the implementation of its SmartSecurities solution.

“We see blockchain technology having a significant positive impact on the investment world, and it starts with the fact that the foundational document for any investment — the registration of a company — will likely soon be possible to do on a blockchain in Delaware.”

Long says that when securities are issued natively on a blockchain, not only can they be administered via smart contracts, but issuers and investors will be able to communicate directly. In addition, she says, payment of dividends can be handled directly, proxy voting will be clear and accurate, share repurchases and tender/exchange offers for bonds will be easy to execute, and the roster of security owners will always be accurate and up to date.  

Long says that amid these advancements, there are also significant opportunities for improvement of business processes in the fund administration business — whether it be mutual funds or private asset funds.  

“At the end of the day, all of these benefits will accrue to end investors, who we’ve always said should be the biggest beneficiaries of blockchain technology in the financial sector.”

The post Private Capital Market Ecosystems Meet the Blockchain appeared first on Bitcoin Magazine.