Zcash Flaw Sparks Monero Audit Interest as Privacy Coin Debate Heats Up

TheNewsCrypto2026-06-06 tarihinde yayınlandı2026-06-06 tarihinde güncellendi

Özet

A significant security flaw in Zcash's Orchard privacy pool was disclosed by non-profit developer Shielded Labs, causing ZEC's price to drop 38% in 24 hours before a modest recovery. The vulnerability, discovered on May 29th by security researcher Taylor Hornby using Anthropic's Opus 4.8 AI model, could have allowed an attacker to create an unlimited supply of counterfeit ZEC tokens undetected. This event has intensified the privacy coin debate. In response, Hornby announced plans to audit Monero (XMR), a leading privacy-focused cryptocurrency that, unlike Zcash, defaults to hiding all transaction data. Hornby expressed confidence in finding vulnerabilities in such privacy coins. The disclosure has cast fresh security scrutiny on the sector.

After non-profit developer Shielded Labs revealed a serious weakness in the blockchain’s Orchard privacy pool, which could have jeopardized the integrity of the token supply, Zcash (ZEC) fell 38% in 24 hours, speeding up the drop. Recent trading for ZEC has been around $361, with a low of $290, and the price has made some modest recovery of around 8% in the last 24 hours as per data from CMC.

Fresh Security Scrutiny

On Thursday night, Shielded Labs released a comprehensive disclosure about X, exposing a security hole that, if used, might have enabled an attacker to secretly produce an infinite supply of fake ZEC tokens. Imagine someone sneaking into the Federal Reserve’s dollar printing machine and making off with a bunch of additional cash; the only difference is that not even the Fed would know it happened.

The flaw was found on May 29th by Taylor Hornby, a security expert hired by Shielded Labs in April 2026 to find protocol weaknesses before bad guys could. The Orchard circuit is the cryptographic scheme supporting Zcash’s most sophisticated privacy pool; Hornby performed a focused evaluation of it using Anthropic’s newly published Opus 4.8 AI model.

One of the tokens that security researcher Taylor Hornby plans to audit next is privacy coin Monero. Hornby utilized Anthropic’s Opus 4.8 AI model to discover a serious flaw in Zcash. Hornby said, “Absolutely!” when asked on X whether he could find vulnerabilities in private coins like Monero. Adding that, Monero will be put up to my list of things to audit.

Unlike Zcash, which gives users the option to be either visible or shielded, Monero (XMR) defaults to hiding transaction data and is one of the biggest privacy-focused cryptocurrencies.

Highlighted Crypto News Today:

Worldcoin Falls Terribly as Arthur Hayes Dumps WLD

İlgili Sorular

QWhat was the key event that triggered the drop in Zcash's price and sparked interest in auditing Monero?

AThe key event was the disclosure by Shielded Labs of a serious security flaw in Zcash's Orchard privacy pool, which could have allowed an attacker to secretly create an unlimited supply of fake ZEC tokens.

QWho discovered the critical vulnerability in Zcash's Orchard circuit, and what tool did they use?

AThe vulnerability was discovered by security expert Taylor Hornby, who was hired by Shielded Labs. He found the flaw using Anthropic's newly published Opus 4.8 AI model.

QHow did the disclosure of the Zcash flaw specifically impact its price (ZEC) in the short term?

AFollowing the disclosure, Zcash (ZEC) fell 38% within 24 hours, reaching a low of around $290. It later saw a modest recovery of about 8% in the subsequent 24 hours.

QWhat is the fundamental difference between Monero's (XMR) and Zcash's (ZEC) approach to privacy, as mentioned in the article?

AThe fundamental difference is that Monero defaults to hiding all transaction data by design, whereas Zcash gives users an option to choose between transparent (visible) or shielded (private) transactions.

QWhat is the next project that security researcher Taylor Hornby plans to audit, and what was his confident response regarding finding vulnerabilities in it?

ATaylor Hornby plans to audit the privacy coin Monero next. When asked on X if he could find vulnerabilities in privacy coins like Monero, he responded, 'Absolutely!'

İlgili Okumalar

Selling Block Space is Dead: Public Chains Must Find a New Way

"Blockchain infrastructure as a neutral, generalized platform is no longer a viable business model. This article argues that simply selling block space has failed, evidenced by the fact that only one public blockchain, Hyperliquid, was among 14 crypto firms surpassing $200M in annual revenue recently. Hyperliquid's revenue vastly outpaces others like Arbitrum, highlighting a crisis. The future lies in public chains pivoting away from neutrality to become product studios, application distributors, payment rails, or vertical SaaS providers, directly serving paying customers. The piece also covers key industry events: a major exploit on Ostium, attributed to vulnerabilities in its off-chain price oracle, underscores the critical security needs for protocols bridging off-chain markets. Additionally, it discusses the necessity of abstracting complex financial instruments like options. Experts argue that to achieve mass adoption, options should be packaged as user-friendly products—such as yield vaults, binary options, or structured products—rather than marketed with their technical complexity. Finally, the radar section notes developments including Yearn's fixed-rate lending product Flex, community backlash over Base's strategy changes, the launch of a DXY perpetuals DEX called Plether, and Starknet's focus on institutional-grade privacy and quantum resistance."

marsbit22 dk önce

Selling Block Space is Dead: Public Chains Must Find a New Way

marsbit22 dk önce

Podcast Notes | Conversation with GSR Asset Management Head: To Determine if This Crypto Rally is Real, Just Watch the Lending Rates on Aave

Podcast Summary: Dialogue with GSR's Head of Asset Management: To Determine if This Crypto Rally is Real, Just Check Lending Rates on Aave Andy Baehr, Managing Director of Asset Management at GSR, discusses the current crypto market, characterizing it as stuck in a state of "ambivalence" with short-lived, unsustainable rallies. He outlines a simple framework: the market moves between "ambivalence" and "conviction" (sustained upward momentum). Currently, every rally resembles a single-stage rocket booster that quickly fizzles out. Baehr identifies three key signals to watch: 1) DeFi lending rates, 2) the potential passage of the CLARITY Act, and 3) the market forming a consensus on the "Fed hawkish peak." He emphasizes that the most immediate indicator for the sustainability of the recent CPI-triggered rally is the USDC borrowing rate on Aave, currently around 3.75%—close to U.S. Treasury yields. The absence of a credit spread indicates low leverage demand and a lack of market energy. He explains that a healthy, sustained rally requires layered buying pressure. Last year's rally progressed from an ETH short squeeze to crypto-native trader influx and finally to ETF inflows. Currently, this structure is missing. Other potential structural buyers like Digital Asset Treasury (DAT) companies are absent, and ETF flows have proven transient. Baehr notes that while small-cap crypto tokens outperformed large caps in Q2—a potential sign of capitation in major assets—capital is also flowing to more exciting opportunities like AI stocks and tech IPOs, leaving crypto sidelined. Regarding DeFi, he highlights that platforms like Aave provide a clear, real-time signal of leverage demand through their supply/demand-driven interest rates. A significant, sustained rate increase would signal genuine market conviction. He also observes the quiet emergence of fixed-income-like products and vaults in DeFi. On regulation, the probability of the CLARITY Act passing before the August 7th deadline has dropped linearly from 75% to below 40% on Polymarket. Baehr suggests its passage would be treated as a bullish surprise, a potent driver for price movement. However, political hurdles, including ethical clause debates and disclosures about the First Family's crypto profits, remain significant obstacles. Ultimately, the market awaits clarity on the Fed's terminal rate under Chair Warsh. Until the "Fed Solstice"—the point where the market collectively understands the peak of hawkish policy—sustained conviction will be difficult to achieve.

marsbit33 dk önce

Podcast Notes | Conversation with GSR Asset Management Head: To Determine if This Crypto Rally is Real, Just Watch the Lending Rates on Aave

marsbit33 dk önce

Send a Message to Transfer Coins? Telegram to 'Stuff' a Crypto Wallet into 1 Billion Users This Summer

Telegram founder Pavel Durov has announced that a native, non-custodial wallet called Gram wallet will be built into every Telegram app this summer. This move aims to provide instant, fee-free cryptocurrency transfers for the platform's over 1 billion monthly active users. Durov described it as the largest deployment of a non-custodial crypto wallet in history. The new wallet, developed by Telegram itself, differs fundamentally from the existing third-party @wallet bot. It will be non-custodial from the start, meaning users will control their private keys. Following the announcement, the GRAM token (formerly Toncoin) saw a price increase of approximately 8%. This initiative is part of Telegram's renewed control over the TON blockchain and its "Make TON Great Again" roadmap, marking a return to the project after a 2018 SEC lawsuit. The launch comes as other super-apps like X Money and Meta are also expanding into digital payments, with Telegram opting for a crypto-native approach. However, key details remain unclear, including the exact launch date beyond "this summer," how the promised zero fees will be implemented technically, and how asset support and private key management will work for mainstream users.

marsbit1 saat önce

Send a Message to Transfer Coins? Telegram to 'Stuff' a Crypto Wallet into 1 Billion Users This Summer

marsbit1 saat önce

Hyperliquid’s HIP-4 proposal fuels HYPE staking as long-term conviction grows

Hyperliquid has proposed the HIP-4 upgrade to expand from perpetual futures into a broader, permissionless infrastructure layer for on-chain applications, requiring deployers to stake 500,000 HYPE to launch new markets. This shift aims to enable developers to build on its platform, a strategy backed by growing long-term investor conviction. Evidence includes a major trader staking millions in HYPE instead of taking profits, with total staked tokens reaching 43.9% of the supply, reducing available tokens and strengthening network security. Market metrics like high open interest and balanced funding rates suggest measured, non-speculative trader positioning. Sustained growth in protocol revenue, TVL, and governance participation further supports the positive outlook, contingent on continued user adoption and successful upgrade execution.

ambcrypto1 saat önce

Hyperliquid’s HIP-4 proposal fuels HYPE staking as long-term conviction grows

ambcrypto1 saat önce

7 Months After the Collapse of Huiwang, Southeast Asia's Escrow Platforms Undergo a Major Reshuffle

Following the collapse of Huione Pay—dubbed the "Alipay of Southeast Asia"—seven months ago, the region's underground financial guarantee platform sector is undergoing a significant reshuffle. This power vacuum has been swiftly filled by emerging platforms such as XinBi, Tiger/Navigator, JinBei (renamed JinBo), Dali/Tiancheng, and FullyLight. These platforms, operating largely via Telegram and offering services like escrow for illicit transactions, have absorbed the vast user base and markets left behind by Huione. While positioning themselves as "trust intermediaries," their primary clientele consists of networks involved in online scams, money laundering, illegal gambling, and even human trafficking. For instance, the Tiger/Navigator platform explicitly provides "escrow" services for kidnapping-for-ransom operations ("强押车交易"). Data underscores the immense scale: Huione alone processed over $103 billion in cryptocurrency payments and facilitated over $31 billion through its escrow market before its downfall, linking it to Cambodia's notorious Prince Group. Since its collapse, competitors have seen explosive growth. For example, the XinBi platform has accumulated over $1.6 billion in total USDT revenue, while platforms like NewPay, OkPay (under Dali), and FullyLight Wallet collectively processed over $4.8 billion in USDT in a single year. This ecosystem thrives in regions like Cambodia and Myanmar, where regulatory gaps allow these platforms to act as critical financial infrastructure for sprawling cybercrime industries, from scam compounds to online casinos. The article concludes that the moniker "Southeast Asian Alipay" is a misnomer, obscuring the platforms' fundamental role in enabling serious criminal enterprises rather than representing legitimate financial innovation.

Odaily星球日报1 saat önce

7 Months After the Collapse of Huiwang, Southeast Asia's Escrow Platforms Undergo a Major Reshuffle

Odaily星球日报1 saat önce

İşlemler

Spot