CVE-2026-52735

Zebra (a Rust-based Zcash node) used a pure-Rust P2SH sigop counter that short-circuited on disabled opcodes like OP_CODESEPARATOR, undercounting sigops compared to zcashd. An attacker without mining power could trigger a chain split by broadcasting P2SH spends with malicious redeem scripts. Fixe...

CVE-2026-52735

creationtimestamp| type| source ---|---|--- 2026-07-03 21:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprjo7adcd2x 2026-08-18 22:08:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfa54nnq52p...