Log in Start free

Zcash

Products

ProductCVEsExploitedLatest
halo2_gadgets1–Jul 17, 2026
librustzcash1–Jul 17, 2026
orchard1–Jul 17, 2026
zcash1–Jul 17, 2026
zcashd1–Apr 5, 2026

Exploited and recent CVEs

  • CVE-2026-54496 Critical 9.3 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness 0.3%
  • CVE-2026-54496 Critical 9.3 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness 0.3%
  • CVE-2026-54496 Critical 9.3 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness 0.3%
  • CVE-2026-54496 Critical 9.3 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness 0.3%
  • CVE-2026-35679 Low 3.5 Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometim 0.2%