Overview
- Zcash published v6.12.0 on Tuesday after confirming a flaw that let zcashd skip proof checks for Sprout transactions went unused.
- The issue dated back to July 2020 and threatened about 25,424 ZEC still parked in the legacy Sprout shielded pool.
- Major mining pools, including Luxor, F2Pool, ViaBTC, and AntPool, had applied fixes by March 25–26, closing a key path to abuse.
- The Zebra full node was not affected and would have split from any exploited chain, creating a safety backstop for the network.
- Zcash’s turnstile rule requires coins leaving Sprout to have provably entered it, which would have curbed any attempt to inflate supply.