Svmuu reported that Haseeb, Managing Partner at Dragonfly, has addressed the recently patched Zcash vulnerability, stating that there are many misconceptions in the market regarding the incident. He pointed out that even if the vulnerability had been exploited before the fix, an attacker could only profit by forging ZEC within the shielded pool. For these tokens to enter mainstream trading platforms, they would first need to be converted from shielded addresses to transparent addresses. Since the supply of ZEC in transparent addresses is publicly verifiable, any abnormal transfers exceeding the maximum supply would be detected and blocked. Therefore, the vast majority of investors and exchange users holding transparent ZEC would not be affected.
Haseeb stated that the Zcash team plans to introduce a new “Turnstile” mechanism and a new shielded pool in future upgrades to verify that the current shielded pool does not suffer from inflation issues. He also noted that formally verified cryptographic systems can reduce implementation errors at the design level. Finally, Haseeb disclosed that Dragonfly still holds ZEC, and he is personally an investor in ZODL.