Zcash founder Zooko Wilcox said a critical vulnerability in the Orchard shielded pool was discovered on May 29 and fixed by June 2. Security researcher Taylor Hornby found the flaw, which Shielded Labs confirmed could have allowed attackers to create unlimited counterfeit ZEC without detection. The issue matters because Orchard’s privacy features make it impossible to prove whether the bug was exploited before the fix. Shielded Labs is now exploring a network upgrade to verify Zcash’s total supply integrity.








