Zcash’s ZEC token price falls as the network discloses new details about a “critical counterfeiting vulnerability” tied to its Orchard shielded pool. Multiple reports say security engineer Taylor Hornby, working with Shielded Labs, identifies the issue and notifies the Zcash Open Development Lab (ZODL). Zcash responds with an emergency patch via a hard fork activated on June 3. The disclosed weakness is described as allowing false inputs to an elliptic-curve multiplication check, which could theoretically enable an attacker to mint unlimited counterfeit ZEC. Zcash and related parties also note the challenge of determining whether exploitation occurred before the fix, because Orchard’s privacy features make cryptographic proof of nonexistence difficult.
While some commentators frame the risk as primarily theoretical, others point to market uncertainty and ongoing debate over privacy coins and the broader class of circuit bugs that can affect zero-knowledge systems. Reports also mention that similar Zcash counterfeiting issues have been addressed before, including a prior vulnerability identified in 2018 that was remediated without reported losses. The discussion centers on the potential supply integrity verification steps and proposed network upgrades to allow stronger validation of the ZEC supply in relation to Orchard.