Mexc Zcash Foundation Releases Urgent Patch for Critical Security Flaws Amid $651M Hack Surge
Article Content
- •Zcash Foundation released Zebra 4.4.0 to fix critical vulnerabilities.
- •April 2026 saw $651 million in crypto hacks, the highest on record.
- •Node operators are urged to upgrade immediately to prevent potential network splits.
On May 2, 2026, the Zcash Foundation announced the release of Zebra version 4.4.0, addressing multiple critical security vulnerabilities in its Rust-based node implementation. This update comes in response to a record $651 million in losses from crypto hacks in April 2026, marking it as the worst month for crypto exploits. The vulnerabilities include a denial-of-service flaw that could prevent new block discovery and consensus-critical bugs that may allow Zebra nodes to accept blocks rejected by zcashd, potentially leading to network splits. The most severe issue could enable remote attackers to halt a node's ability to discover new blocks. The Foundation strongly urges all node operators to upgrade immediately to mitigate risks. Security researcher Sangsoo-osec identified three of the five vulnerabilities, emphasizing the urgency of the situation. Without timely updates, nodes face significant risks, including disruptions in block discovery and increased resource consumption.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track Lazarus Group and Bybit in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails… 
Lazarus Group Linked to PHP Vulnerability Exploitation Plans A cybersecurity report from Cyfirma indicates that a group suspected to be linked to North Korea's Lazarus Group is preparing to exploit critical vulnerabilities in PHP, specifically CVE-2026-109618 and CVE-2026-109619, which allow unauthenticated remote code execution. The attackers, communicating in Korean, are…