Skip to content
Threat Feed
Subscribe

Vendor

Zcash Foundation

3 briefs RSS
low advisory

Denial of Service via Unvalidated Coinbase Height in Zebra (zebrad)

An unvalidated coinbase height input in Zebra prior to 6.3.0 allows malicious peers to induce synchronization stalls and prevent nodes from reaching the latest chain tip.

Zebra
1t 1c
critical advisory

Zebra Consensus Failure due to Improper SIGHASH_SINGLE Validation

Zebra 4.4.0 failed to enforce a ZIP-244 consensus rule for V5 transparent transactions, potentially leading to a consensus split with zcashd nodes if an input is signed with `SIGHASH_SINGLE` and there is no corresponding output.

zebra +1 consensus failure signature validation network partition
2r 1t
critical advisory

Zebra Consensus Split Vulnerability Due to SIGHASH_SINGLE Handling

Zebra and zcashd disagree on a consensus rule for V5+ transparent spends related to SIGHASH_SINGLE handling when the input index has no corresponding output, leading to a consensus split where Zebra accepts invalid blocks rejected by zcashd.

Zebra +2 consensus vulnerability blockchain
2r