ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeatedly push invalid proofs into the shared halo2 batch verifier, forcing honest block proofs onto the slow individual-verification path and slowing block processing roughly sevenfold.
2026年10月2日
CVE-2026-104425 [MEDIUM] – ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allow
📑 文章目录



