# Critical Wallet UPDATE! **URL:** \ **Category:** Mining\ **Created:** [April 14, 2017, 12:12am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244 "2017-04-14T00:12:52Z")\ **Posts on this page:** 18\ **Page:** 1
**Author:** ![dlehenky](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/dlehenky/32/1751_2.png) [@dlehenky](https://forum.zcashcommunity.com/u/dlehenky)\ **Post date:** [April 14, 2017, 12:12am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/1 "2017-04-14T00:12:52Z")
Hi all. Zcash has identified and fixed a critical security flaw. Both Zcash v1.0.8-1 and the just-released ZClassic v1.0.8 have the security patch applied. PLEASE UPDATE YOUR NODE ASAP. **[Moderator Edit] Zcash v1.0.8 is vulnerable, and v1.0.8-1 has the fix. I changed the mistake above for safety to avoid confusion. The v1.0.8-1 version is tagged, but we haven’t built official binaries. We’ll post the official security disclosure once binaries are released. -Nathan** For Zcash: clone or pull from the Master repo: > **[GitHub - zcash/zcash: Zcash - Internet Money](https://github.com/zcash/zcash)** > > Zcash - Internet Money. Contribute to zcash/zcash development by creating an account on GitHub. For ZClassic: clone or pull from: [https://github.com/z-classic/zclassic/tree/v1.0.8-dev](https://github.com/z-classic/zclassic/tree/v1.0.8-dev) OR use the brand new v1.0.8-1 release: > **[Release v1.0.8-1 · z-classic/zclassic](https://github.com/z-classic/zclassic/releases/tag/v1.0.8-1)** > > Tracks Zcash to v1.0.8-1 > Resolves DoS security issue caused by certain zk transactions > for graphical wallet installation, use eleos -Best David ---
**Author:** ![Shawn](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/shawn/32/187_2.png) [@Shawn](https://forum.zcashcommunity.com/u/Shawn)\ **Post date:** [April 14, 2017, 2:24am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/2 "2017-04-14T02:24:09Z")
Looks like someone has been watching the Github Repo, The Zcash team will announce when it is ready and instructions on what steps to take. They are still merging as of 10 mins ago. ---
**Author:** ![dlehenky](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/dlehenky/32/1751_2.png) [@dlehenky](https://forum.zcashcommunity.com/u/dlehenky)\ **Post date:** [April 14, 2017, 2:26am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/3 "2017-04-14T02:26:48Z")
> [@Critical Wallet UPDATE!](https://forum.zcashcommunity.com/t/critical-wallet-update/15244): > > Hi all. Zcash has identified and fixed a critical security flaw. Both Zcash v1.0.8-1 and the just-released ZClassic v1.0.8 have the security patch applied. PLEASE UPDATE YOUR NODE ASAP. [Moderator Edit] Zcash v1.0.8 is vulnerable, and v1.0.8-1 has the fix. I changed the mistake above for safety to avoid confusion. The v1.0.8-1 version is tagged, but we haven’t built official binaries. We’ll post the official security disclosure once binaries are released. -Nathan For Zcash: clone or pull from… ---
**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\ **Post date:** [April 14, 2017, 2:23am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/4 "2017-04-14T02:23:02Z")
fyi I am building a new release of my Windows builds right now to post asap ---
**Author:** ![dlehenky](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/dlehenky/32/1751_2.png) [@dlehenky](https://forum.zcashcommunity.com/u/dlehenky)\ **Post date:** [April 14, 2017, 2:31am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/6 "2017-04-14T02:31:22Z")
The Zclassic devs requested that I spread the word, and at that time told me Zcash was merging the patch. I looked at the Zcash repo and say a reference to the patch, so I posted the repo link. Edit: Next time I’ll just address the ZClassic folks, if that’s what you want. ---
**Author:** ![Shawn](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/shawn/32/187_2.png) [@Shawn](https://forum.zcashcommunity.com/u/Shawn)\ **Post date:** [April 14, 2017, 2:33am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/7 "2017-04-14T02:33:40Z")
That is cool, I appreciate you helping out.🙂 I believe the official explanation and instructions on updating are going to be posted _very_ soon. ---
**Author:** ![Quent17](https://avatars.discourse-cdn.com/v4/letter/q/47e85d/32.png) [@Quent17](https://forum.zcashcommunity.com/u/Quent17)\ **Post date:** [April 14, 2017, 2:35am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/8 "2017-04-14T02:35:02Z")
Mac version coming ? 🙂 ---
**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\ **Post date:** [April 14, 2017, 2:39am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/9 "2017-04-14T02:39:20Z")
yes, later tonight I’ll post a build for mac, too ---
**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\ **Post date:** [April 14, 2017, 2:41am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/10 "2017-04-14T02:41:54Z")
Patched command-line binaries for Windows v1.0.8-1 at now at: https://://zcash.dl.mercerweiss.com/zcash-win-v1.0.8-1.zip Updated zcash4win GUI with patched zcashd, and updated command line for Mac and zcash4mac GUI later tonight ---
**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\ **Post date:** [April 15, 2017, 4:26am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/11 "2017-04-15T04:26:57Z")
Mac 1.0.8-1 posted, see: > [@April 14, 2017 - Dev update](https://forum.zcashcommunity.com/t/april-14-2017-dev-update/15261/2): > > I also posted updated versions of my releases patched for 1.0.8-1, at [https://zcash4win.com](https://zcash4win.com) and the command line version for mac was just uploaded to [https://zcash.dl.mercerweiss.com/zcash-mac-v1.0.8-1.zip](https://zcash.dl.mercerweiss.com/zcash-mac-v1.0.8-1.zip) (it is stand-alone, position independent binaries, linked against the included libraries which need to be in the same directory as them). Current zcash4mac users can stop the GUI, run the v1.0.8-1 zcashd in the terminal, then restart the GUI wallet and it will use the running, updated zcash. A… ---
**Author:** ![neuromancer](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/neuromancer/32/4076_2.png) [@neuromancer](https://forum.zcashcommunity.com/u/neuromancer)\ **Post date:** [April 15, 2017, 6:32am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/12 "2017-04-15T06:32:16Z")
Hi @anon47418038, getting an interesting message after updating the binaries for zcashd to 1.0.8-1 (see screenshot below). I did overwrite the original binaries in /Applications/zcash4mac.app/Contents/Java with the ones in your package. Maybe I shouldn’t have? Anyway’s here’s the screenshot. I’ll try to zap some milliZEC to the wallet to see if it’s actually updating. Thanks! ![](https://global.discourse-cdn.com/zcash/original/2X/4/4efcffb5021fd978d7de9c2e80c35c21e09bb0c8.png) ---
**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\ **Post date:** [April 15, 2017, 6:36am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/13 "2017-04-15T06:36:17Z")
I’d go into “Add/Remove Programs” and uninstall zcash4win and download the new release (ugh, same file name, which is a limitation of Windows Installer) from [https://zcash4win.com](https://zcash4win.com) ---
**Author:** ![neuromancer](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/neuromancer/32/4076_2.png) [@neuromancer](https://forum.zcashcommunity.com/u/neuromancer)\ **Post date:** [April 15, 2017, 6:45am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/14 "2017-04-15T06:45:55Z")
Thanks however I’m running on the Mac version 🙂 Anyways, I cashed out some milliZEC from my mining pool and I can see that the transaction shows up successfully. To some extent, the java client can communicate with the zcashd daemon, but it throws these errors and I can’t see my balance. I’ll keep tinkering with it. ---
**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\ **Post date:** [April 15, 2017, 6:48am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/15 "2017-04-15T06:48:11Z")
oh derp…I didn’t overwrite, that might make things unhappy…I working on updating the GUI with some things and will push a new installer for zcash4mac soon. In the meantime I’d reinstall zcash4mac, and run the zcashd in the zipfile from Terminal before launching it. ---
**Author:** ![neuromancer](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/neuromancer/32/4076_2.png) [@neuromancer](https://forum.zcashcommunity.com/u/neuromancer)\ **Post date:** [April 15, 2017, 6:49am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/16 "2017-04-15T06:49:56Z")
Thanks! I’m in no hurry, I’ll wait for the full installer until then 🙂 ---
**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\ **Post date:** [April 15, 2017, 6:50am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/17 "2017-04-15T06:50:19Z")
thanks for waiting a bit, its late here and I gotta crash ---
**Author:** ![neuromancer](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/neuromancer/32/4076_2.png) [@neuromancer](https://forum.zcashcommunity.com/u/neuromancer)\ **Post date:** [April 15, 2017, 6:50am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/18 "2017-04-15T06:50:57Z")
I thought so too. Thanks for the immense help/contributions! Get some good rest sir! ---
**Author:** ![neuromancer](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/neuromancer/32/4076_2.png) [@neuromancer](https://forum.zcashcommunity.com/u/neuromancer)\ **Post date:** [April 15, 2017, 6:55am UTC](https://forum.zcashcommunity.com/t/critical-wallet-update/15244/19 "2017-04-15T06:55:28Z")
Just as a side note, the method proposed by @anon47418038 (reinstall zcash4mac, kill any running zcashd process and run the process from the zip before launching the client) worked perfectly.