Zcash launched Zebra 6.2.1 with two security improvements in chain synchronization and mempool verification, along with a specific fix for the testnet. The development team recommended all node operators update as soon as possible.
On the security front, the new version of Zebra addresses vulnerability GHSA-x93j-mj2f-q338, classified as moderate severity, which allowed a poisoned block to delay the download of the corresponding valid block.
Chain synchronization can now immediately retry the download of a legitimate block body after rejecting one that shares the same header hash, without having to wait for a subsequent child block to trigger the cleanup. Credit for identifying the issue went to developer @oxarbitrage.
On nodes with NU6.3 (Ironwood) active, Zebra also began rejecting mempool transactions with insufficient fees or structurally invalid shielding before executing the costly proof verification. Additionally, it disconnects peers that send transactions with invalid shielded proofs, reducing the attack surface against cybercriminals on the network.
The testnet fix targets the RPC getblocktemplate, which previously anticipated the switch to minimum-difficulty templates when cur_time approached within a fixed margin of 150 seconds from the consensus threshold. This produced blocks with future timestamps and caused artificial difficulty drops on the testnet well below their natural equilibrium. Now, the switch occurs only when cur_time reaches the consensus threshold exactly. The Zebra update is available on GitHub, crates.io, and Docker Hub.
Source:Â https://zfnd.org/zebra-6-2-1-release/
Disclaimer:Â Crypto Economy Flash News are based on verified public and official sources. Their purpose is to provide fast, factual updates about relevant events in the crypto and blockchain ecosystem.
This information does not constitute financial advice or investment recommendation. Readers are encouraged to verify all details through official project channels before making any related decisions.
