<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Zcash Releases Emergency Zebra 4.4.0 Patch After Critical Consensus Bugs Found]]></title><description><![CDATA[<p dir="auto"><img src="/forum/assets/uploads/files/1777725232567-48fca376-9372-4488-813c-3989c9eedd6f-image.png" alt="48fca376-9372-4488-813c-3989c9eedd6f-image.png" class=" img-fluid img-markdown" /><br />
Zcash has issued an urgent upgrade to Zebra 4.4.0 after the Zcash Foundation uncovered five security vulnerabilities, including three that could have broken network consensus.</p>
<p dir="auto">The most serious flaw could allow an attacker to silently halt a node’s ability to discover new blocks using just a single malicious connection, with no alerts, bans, or detectable misbehavior—making it effectively invisible to standard monitoring tools. Other bugs included incorrect transaction validation logic and memory handling issues that could lead to chain splits or network instability.</p>
<p dir="auto">Because multiple issues were consensus-critical, outdated nodes risk accepting invalid transactions that other implementations would reject, potentially fragmenting the blockchain.</p>
<p dir="auto">The Foundation has strongly advised all operators to upgrade immediately, warning that older versions remain exposed to full exploitation risk.</p>
]]></description><link>https://undeads.com/forum/topic/19351/zcash-releases-emergency-zebra-4.4.0-patch-after-critical-consensus-bugs-found</link><generator>RSS for Node</generator><lastBuildDate>Sun, 03 May 2026 19:29:17 GMT</lastBuildDate><atom:link href="https://undeads.com/forum/topic/19351.rss" rel="self" type="application/rss+xml"/><pubDate>Sat, 02 May 2026 12:34:02 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Zcash Releases Emergency Zebra 4.4.0 Patch After Critical Consensus Bugs Found on Sat, 02 May 2026 14:24:45 GMT]]></title><description><![CDATA[<p dir="auto">The broader April context of $651 million in losses across 30 exploits makes the timing of Zcash's disclosure strategically significant, releasing a critical patch during a period of heightened attacker activity compresses the window between public disclosure and exploitation attempts on unpatched nodes.</p>
]]></description><link>https://undeads.com/forum/post/53436</link><guid isPermaLink="true">https://undeads.com/forum/post/53436</guid><dc:creator><![CDATA[kevin1]]></dc:creator><pubDate>Sat, 02 May 2026 14:24:45 GMT</pubDate></item></channel></rss>