Pinned
Hey all! Zellic blog post again!
I don’t know if you remember tho, I’ve found ton of bugs in Zcash and received bounty!
Yes, of course, the bounty amount is most interesting. But there’s more to it than that. If you’d like to learn about Zebra nodes and vulnerabilities, dive
We found bugs in @Zcash.
Not in circuits or cryptography, but in the implementation of Zebra, the Rust full node.
Caching, error handling and peer attribution bugs led to multiple ways to stall or crash a node, giving $93,750 in bounties.
Here’s how we poisoned Zcash’s state.