Zcash Foundation released Zebra 4.5.1 with a critical fix for a P2SH sigop-counting bug left unresolved by 4.5.0, warning all Zebra node operators to upgrade because there is no workaround. The bug could make Zebra reject blocks that zcashd accepts, risking a chain split if enough low-threshold multisig P2SH spends pushed Zebra's count over the 20,000 sigops limit. The GitHub advisory says an attacker would not need mining power; broadcasting valid transactions and letting any miner include them would be enough.

TLDR by @Benthic

More coverage

Explore the topic

More on Zcash

Comments