Zcash/zcashd Security Advisories and Vulnerability Fixes Summary

Critical Vulnerability Information Security Advisory 2021-03-01 Issue: Important security update for ECC iOS SDK (Version 0.9.2). Impact: Unstoppable Wallet and Nighthawk Wallet applications have applied this fix. Recommendation: Users should upgrade to the latest version immediately. Security Advisory 2020-02-06 Issue: zcashd 2.1.1-1 includes a soft-fork change to consensus rules to address a security vulnerability that could lead to a consensus split. Impact: Miners and mining pools are requested to upgrade as soon as possible. Recommendation: Users should upgrade promptly. Security Advisory 2019-11-08 Issue: zcashd 2.1.0-1 includes an important security fix for CVE-2017-18350. Impact: Users should immediately upgrade to this version and stop using older versions. Recommendation: Will not result in funds being stolen or forged. Security Advisory 2019-09-24 Issue: zcashd 2.0.7-3 includes security fixes reported by Florian Tramèr, Dan Boneh, and Kenneth G. Paterson. Impact: Users should immediately upgrade to this version and stop using older versions. Recommendation: Further details will be released after coordination with the reporters. Security Advisory 2019-03-27 Issue: zcashd 2.0.4 includes fixes for bugs described in previous security advisories. Impact: Users should install this update and rescan the blockchain. Recommendation: Thanks to Alexis Enston for providing this information. Security Advisory 2019-03-19 Issue: A bug in Zcashd wallet may cause Sprout z-addresses to display incorrect balances. Impact: Users of Sprout z-addresses are affected; Sapling z-addresses are unaffected. Recommendation: Affected users should suspend trust in received funds until upgrading to zcash v2.0.4. Manual blockchain rescan is strongly recommended.

Goal Reached Thanks to every supporter — we hit 100%!

Zcash/zcashd Security Advisories and Vulnerability Fixes Summary