ZEC today dropped 47%. The zero-knowledge proof privacy pool has a minting vulnerability, allowing attackers to infinitely print fake coins, which cannot be detected on-chain.

The bug has been hidden for 4 years.
Even more outrageous: because all transactions are private, even the project team cannot confirm whether the vulnerability has been exploited.
Bitcoin has also had major vulnerabilities, but they are fully public on the chain, allowing rollbacks and forks.
Privacy coins are not reliable; since all transactions are in the ZK black box, behind the peaceful years, millions of coins may have already been stolen and printed.
The project team can only ask you to "trust us."
Of course, privacy is good, but when it protects money, "non-auditable" is the biggest risk exposure.