ZenCash is currently under threat of a zero-day attack announced by the former lead developer of the Zen node and Eleos wallet code. Shortly after announcing his intention of leaving the project, he also announced and made public a method of attacking the Zen blockchain.
The other members of the Zen founding team, Rob Viglione, Rolf Versluis, and Jane Lippencott, are grateful for all the hard work put into the project by Joshua Yabut when he was the lead developer, and thankful for the notification of the potential zero day attack. We will definitely miss him being on the team.
The nature of the attack could lead to a transaction replay from the Zclassic blockchain to the Zen blockchain. There was replay protection put in place for the launch of Zen, but due to the warning it appears more replay protection would be prudent.
Based on the threat, the Zen Core team has asked our primary exchange partner, Bittrex, to protect their holdings by putting the ZEN wallet into maintenance mode until the code has been reviewed. This does not stop trading on the exchange, only the deposit and withdrawal of Zen funds. This is a short term measure.
The Zen blockchain is intact, no funds have been lost to the best knowledge of the Zen team, and the mitigation plan is already in place.
The mitigation plan is:
- Take a snapshot of the existing blockchain.
- Review the Zen code for issues (already in progress).
- Implement whatever measures are necessary to get the Zen code base to a reliable state.
After the short term mitigation plan, the Zen Core team will continue to work with an industry leading development team, IOHK, to continue development and improvement of the ZenCash software to follow along with the vision laid out in the Zen White Paper.
IOHK developers have already been working with Zen and were very helpful in identifying and fixing the code issue that caused the Zen launch delay. They are also in the process of performing the code review for security.
The Zen team is excited about the opportunity to continue to grow and develop the ZenCash cryptocurrency and is thankful to the many community members, contributors, miners, mining pool operators, purchasers of ZenCash, and exchanges (especially Bittrex!) who have expressed support and encouragement for the project.
We intend to continue to provide an update twice daily on the status of the short term issue, and will then resume consistent communications and activity as we work together to realize the vision in the Zen white paper.
Also published on Medium.