Zcash Patches Critical Soundness Flaw in Orchard

The discovery of this vulnerability highlights the double-edged sword of zero-knowledge privacy protocols—where bugs can lead to undetectable inflation—while simultaneously proving the viability of advanced AI models in identifying complex cryptographic flaws that eluded human auditors for years.

* The flaw lay in under-constrained elliptic curve checks in the `halo2_gadgets` crate, showcasing how subtle implementation bugs in cryptographic libraries can undermine entire protocols.

* Because the Orchard pool is completely private, it is cryptographically impossible to prove the bug was never exploited, dealing a reputational blow and causing a 30% drop in ZEC's price.

* The use of Claude 4.8 to find this vulnerability and assist in writing a proof-of-concept exploit signals a paradigm shift in how smart contracts and cryptographic circuits will be audited and secured moving forward.