AI Found a 4-Year Bug in Zcash That Could Have Printed Unlimited Fake ZEC
A critical vulnerability in Zcash's Orchard shielded pool allowed unlimited undetectable counterfeit ZEC since May 2022. Discovered by security researcher Taylor Hornby using Anthropic Opus 4.8. Emergency fix deployed June 1. ZEC down 36%.
Zcash founder Zooko Wilcox publicly disclosed a critical vulnerability today. The bug was present for 4 years, was found by AI, and cannot be proven unexploited due to Zcash's own privacy design. ZEC is down 36% from recent highs.
What Happened — The Simple Explanation
Zcash uses zero-knowledge proofs to verify transactions without revealing sender, receiver, or amount. The Orchard pool is Zcash's newest and most advanced privacy layer, activated in May 2022.
A bug in the Orchard circuit — specifically two lines of code — allowed an attacker to input false values into an elliptic curve multiplication operation while still passing the verification check. In plain terms: you could lie to the math and get away with it.
This meant an attacker could create unlimited ZEC tokens from nothing, deposit them into the Orchard pool, and nobody could detect it. Not Zcash developers. Not blockchain explorers. Nobody. The privacy design that makes Zcash valuable also made this exploit completely invisible.
Full Timeline — Discovery to Disclosure
The AI Angle — Why This Changes Security Forever
The most significant detail in this story is not the bug itself. It is how it was found.
Taylor Hornby used Anthropic's Opus 4.8 — the most capable AI model available — to conduct a targeted audit of the Orchard circuit. The AI helped identify the under-constrained element that had been missed by every human reviewer for four years. Hornby then wrote a complete, working exploit.
The Double-Edged Sword
If a security researcher can use AI to find a 4-year-old critical bug in a major blockchain protocol in a targeted audit session, then a malicious actor with the same tools could do the same. The difference: Hornby disclosed responsibly. An attacker would not. Every blockchain protocol with complex cryptographic circuits is now a potential target for AI-assisted exploit discovery.
What This Means for Web3 Security
AI is now a standard security research tool. The protocols that survive the next decade will be the ones that use AI to find their own bugs first — before attackers do. This is not theoretical. This just happened. Shielded Labs hired a researcher specifically to use AI for this purpose — and it worked. Every major L1 and L2 should be doing the same.
The Unverifiable Problem — Zcash's Catch-22
Here is the darkest part of this story. Because Orchard is a privacy pool — hiding all transaction details by design — it is cryptographically impossible to verify whether the bug was exploited during the 4-year window.
Zooko Wilcox said it directly: "Because of the privacy properties of Orchard, there is no way to cryptographically prove whether the vulnerability was exploited before it was remediated."
Why the Market is Selling
The Zcash Foundation says no exploitation was detected and no unauthorized value was created. But they cannot prove this. The same privacy that protects legitimate users also protects a hypothetical attacker who may have already printed millions of ZEC silently. Investors are selling the uncertainty, not a confirmed exploit.
The Planned Solution
Zcash is exploring a network upgrade that would cryptographically verify the entire ZEC supply — proving mathematically that no counterfeit ZEC was ever created. This would restore supply integrity and investor confidence. No timeline has been announced.
What About Zodl — The $25M Zcash Wallet?
Zodl — the privacy-focused Zcash wallet backed by Paradigm, a16z, and Coinbase Ventures with $25M raised — is directly affected by this. The wallet enables users to create ZEC wallets and generate on-chain activity through swaps and transactions.
With Orchard now patched and Zcash exploring a supply verification upgrade, Zodl users should not panic — but should monitor the situation. The bug is fixed. The question of what happened before the fix remains open.
View Zodl Airdrop Guide →Frequently Asked Questions
What was the Zcash Orchard vulnerability?
A critical soundness bug in Zcash's Orchard zero-knowledge proof circuit allowed an attacker to create unlimited, undetectable counterfeit ZEC tokens within the Orchard shielded pool. The bug existed in two lines of code and allowed false inputs to elliptic curve multiplication while still passing verification checks. It was present from Orchard's activation in May 2022 until the emergency fix on June 1, 2026.
Was the Zcash bug exploited?
Unknown. Due to Orchard's privacy design, there is no way to cryptographically prove whether the vulnerability was exploited before it was patched. The Zcash Foundation stated there was no evidence of exploitation and no unauthorized value creation detected, but this cannot be proven with certainty.
How was the Zcash vulnerability discovered?
Security researcher Taylor Hornby, engaged by Shielded Labs in April 2026 to audit the protocol, discovered the vulnerability on May 29, 2026 using Anthropic's Opus 4.8 AI model during a targeted review of the Orchard circuit. Hornby wrote a complete working exploit that generated unlimited counterfeit ZEC in a local test environment.
Why did ZEC drop 36% after the patch?
ZEC dropped 36% because Zcash's privacy design makes it impossible to verify whether the bug was exploited. Even though the bug is patched, investors cannot be certain the ZEC supply was not inflated during the 4-year window. The uncertainty about supply integrity is more damaging than a confirmed exploit would be.
What is Zcash doing to restore trust?
Zcash is exploring a network upgrade that would cryptographically verify the integrity of the entire ZEC supply. This upgrade would prove mathematically that no counterfeit ZEC exists, restoring confidence in the supply. No timeline has been announced.
Related Articles
Track Crypto Opportunities — Not Just Risks
115+ verified airdrops with full guides. No bugs, no surprises — just step-by-step instructions.
Browse All Airdrops →Last updated: June 5, 2026 · Sources: CoinDesk, The Block, Shielded Labs