Skip to content
Threat Feed
Subscribe

Product

Zebra-Script

2 briefs RSS
critical advisory

Zebra Consensus Divergence in Transparent Sighash Hash-Type Handling (CVE-2026-44497)

Zebra versions prior to 4.4.0 exhibit a consensus divergence vulnerability (CVE-2026-44497) due to insufficient error handling of invalid sighash types during sighash computation, potentially leading to network partitioning and double-spend attacks.

zebrad +1 consensus-failure vulnerability network-partition
2r
critical advisory

Zebra Consensus Failure due to Improper SIGHASH_SINGLE Validation

Zebra 4.4.0 failed to enforce a ZIP-244 consensus rule for V5 transparent transactions, potentially leading to a consensus split with zcashd nodes if an input is signed with `SIGHASH_SINGLE` and there is no corresponding output.

zebra +1 consensus failure signature validation network partition
2r 1t