Critical Zcash Vulnerability Found and Fixed

A security researcher discovered and reported a critical flaw in Zcash's Orchard privacy pool that allowed a malformed transaction input to bypass validation, potentially enabling creation of ZEC from nothing; the Zcash team patched the issue, but there is no way to confirm whether the bug was exploited prior to the fix.