A bug in all Zcash implementations and most of its forks could leak metadata containing the full nodes' with shielded addresses IPs.
Komodo core developer Duke Leto disclosed the bug in a blog post published on his personal website.
A Common Vulnerabilities and Exposures code has already been assigned to track the issue on Sept. 27.
"A bug has existed for all shielded addresses since the inception of Zcash and Zcash Protocol. It is present in all Zcash source code forks. It is possible to find the IP address of full nodes who own a shielded address. That is, Alice giving Bob a zaddr to be paid, could actually allow Bob to discover Alice's IP address. This is drastically against the design of Zcash Protocol."
Per the announcement, everyone who published their zaddr or provided it to a third party could be affected by the vulnerability.
Leto claims that users should consider their "IP address and geo-location information associated with it as tied to zaddr."
According to Leto, users who never used a zaddr, only used it over the Tor Onion Routing network or only to send funds, are not affected.
Leto also claims that Zcash is not the only cryptocurrency affected and provides a non-exhaustive list.
Leto also points out that Komodo has already disabled the shielded addresses feature and transitioned it to the Pirate chain, which means that KMD no longer contains the bug.
As Cointelegraph recently reported, Electric Coin Company, which launched and supports the development of privacy-coin Zcash, recently published a paper describing a trustless cryptographic system called Halo.
Zcash Bug Could Reveal Shielded Full Nodes' IP Addresses
Published on Sep 29, 2019
by Cointele | Published on Coinage
Coinage
Recent News
View All
Blockchain Bites: Bitcoin's Run, Uniswap's Hemorrhaging Value, Anchorage's Banking Bid
Bitcoin is nearing all-time highs in price and market cap last set three years ago.
Japan's megabanks to lead experiment with digital yen
We have, in order, Cheese Bank with a $3.3 million theft, Akropolis with its $2 million loss, Value DeFi with a whopping $6 million exploit and finally Origin Protocol's loss of $7 million.
Number of new Bitcoin addresses spikes amid growing FOMO
Japan's three largest banks, as part of a group of 30 private sector actors, are set to collaborate on an experiment with a digital yen.
Not just Wall Street: Quant trader explains why Bitcoin price is going up
Sam Trabucco, a quantitative trader at Alameda Research, believes four general factors are pushing up the price of Bitcoin.