Zcash node software recently fixed a critical security vulnerability. The flaw exists in the deprecated but still balance-remaining Sprout privacy pool, which could theoretically be exploited by malicious miners to steal approximately 25,000 ZEC, worth about $6.5 million at current prices. The development team has released version v6.12.0 with the fix, and major mining pools have completed upgrades within 3 days. The official statement indicates that the vulnerability was not actually exploited and user funds remain secure. (Decrypt)