Deep Tide TechFlow News, May 29 — The Zcash Foundation released version 4.5.0 of the Zebra node client.


This update includes multiple security fixes, involving a critical consensus vulnerability and several high-risk denial-of-service (DoS) issues, and strongly recommends all node operators upgrade immediately.

It is reported that the core fixes include a sigop counting error caused by P2SH script parsing (which could lead to a consensus fork with zcashd), a logical flaw in the NU5 block validation cache, a risk of crashes due to overflow in transparent address balances, as well as multiple vulnerabilities in RPC interfaces and mempool handling leading to crashes and resource exhaustion.
Additionally, some of these vulnerabilities can be exploited by malicious nodes to cause node freezes, restart loops, or even permanent shutdowns.
ZEC-5.54%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned