Zano Privacy Blockchain Executes Emergency Rollback After Security Flaw

In a significant move on September 28, the privacy-focused blockchain project Zano initiated a major chain reorganization. The team identified a technical vulnerability linked to its gateway address functionality, prompting a decision to roll back the network state to block height 3,833,000—effectively reverting approximately one month of transaction history. This restoration point predates a pivotal hardfork activation on August 26.

Impact of the Vulnerability and Response

The primary goal of the rollback is to eliminate any unauthorized circulation of assets that may have occurred during the vulnerability window, specifically involving ZANO's native token and its associated stable asset, Freedom Dollar (fUSD). The project assures users that core security elements, including spending key safety and transaction privacy protections, remained uncompromised, and the network consensus was unaffected.

To synchronize with the recovered chain, all network participants—including node operators, miners, and mining pools—are required to upgrade their software to a newly released version. Transactions processed during the affected period will not be recognized on the restored chain.

Market Response and User Compensation Plan

Following the incident, several cryptocurrency exchanges preemptively suspended deposit and withdrawal services for ZANO and fUSD to safeguard user funds. Regarding potential losses, Zano has outlined a compensation framework.

  • Funding Sources: Compensation will be drawn from the project's development fund, the team's token allocation, and voluntary contributions from major community holders.
  • Key Assurance: The project has explicitly committed to not issuing new ZANO tokens to cover losses, thereby protecting existing holders from dilution.

The team is currently focused on stabilizing the network and has pledged to release a more detailed post-mortem analysis. This event underscores the ongoing challenge blockchain projects, particularly those enhancing privacy, face in balancing sophisticated functionality with robust security.