Zcash Crashes After a Counterfeit-Token Bug Sat in the Privacy Pool for Four Years

Zcash Crashes After a Counterfeit-Token Bug Sat in the Privacy Pool for Four Years


Real rights-safe Pexels photo showing Zcash and other cryptocurrency coins for a protocol-security market story. image By Isaac • June 6, 2026 10:33 am •

Zcash plunged on June 5, 2026 after Shielded Labs disclosed a critical bug in the Orchard privacy pool. The flaw could have allowed unlimited, undetectable counterfeit ZEC tokens if anyone had found and exploited it.

According to CoinDesk, the vulnerability had been sitting in the protocol since Orchard activated in May 2022. That is roughly four years of exposure inside the part of Zcash that is supposed to guarantee supply integrity.

Trending: ‘Islamophobic’ Killer Is Identified — And Shocka! He’s Muslim

The discovery itself is part of the story. Security engineer Taylor Hornby found the bug on May 29, 2026 during a targeted review while using Anthropic’s Opus 4.8 model.

Developers shipped an emergency fix by June 1. The patch was fast, but it did not

Continue reading

 

Join the conversation!

Please share your thoughts about this article below. We value your opinions, and would love to see you add to the discussion!