# Security concerns of Zcash network **URL:** \ **Category:** General\ **Created:** [December 22, 2020, 10:30am UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005 "2020-12-22T10:30:08Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![bruges](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@bruges](https://forum.zcashcommunity.com/u/bruges)\ **Post date:** [December 22, 2020, 10:30am UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/1 "2020-12-22T10:30:08Z")
There’s an ongoing attack on Monero network, for further details read the following article: [https://sethsimmons.me/posts/moneros-ongoing-network-attack/](https://sethsimmons.me/posts/moneros-ongoing-network-attack/) TL;DR Someone deployed ~130 monero nodes to try halt the network. However Monero has more than a thousand nodes so the attack has no success for now. Now back to Zcash. Based on blockchair explorer there are 140 nodes running the network: [Zcash / Node explorer — Blockchair](https://blockchair.com/zcash/nodes) Firstly, I wonder if this figure is correct? If so, then a similar attack would halt zcash network. Actually I’m surprised that zcash has so few nodes. If all the above is correct and if I’m not missing something, then it’s crucial to start educate people to run zcash nodes. And deploy more trusted nodes from ZF, ECC and other trusted Zcash entities. ---
**Author:** ![mdr0id](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/mdr0id/32/37160_2.png) [@mdr0id](https://forum.zcashcommunity.com/u/mdr0id)\ **Post date:** [December 22, 2020, 2:40pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/2 "2020-12-22T14:40:52Z")
FWIW, historically these tools only see the network from one node, and aren’t designed to distinguish peers (e.g tor nodes). ---
**Author:** ![briansorahan](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/briansorahan/32/17831_2.png) [@briansorahan](https://forum.zcashcommunity.com/u/briansorahan)\ **Post date:** [May 27, 2021, 1:12pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/4 "2021-05-27T13:12:16Z")
This says there are only 5 nodes, which seems completely bogus [Zchain Network - Zcash Network Visualization](https://zcha.in/network) e.g. I don’t see the node that I’m running at my house 😉 Is there a tool that reliably shows the size of the zcash network? ---
**Author:** ![amiller](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/amiller/32/10_2.png) [@amiller](https://forum.zcashcommunity.com/u/amiller)\ **Post date:** [May 27, 2021, 1:22pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/5 "2021-05-27T13:22:54Z")
Yeah I don’t know how that is still up, it’s been completely wrong for years. I don’t know of an alternative yet. It shouldn’t be hard, could build one based on [Provisioning Bitcoin Network Crawler · ayeowch/bitnodes Wiki · GitHub](https://github.com/ayeowch/bitnodes/wiki/Provisioning-Bitcoin-Network-Crawler) ---
**Author:** ![briansorahan](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/briansorahan/32/17831_2.png) [@briansorahan](https://forum.zcashcommunity.com/u/briansorahan)\ **Post date:** [May 27, 2021, 1:54pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/6 "2021-05-27T13:54:15Z")
Looks like a fun weekend project! ---
**Author:** ![Autotunafish](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/autotunafish/32/7827_2.png) [@Autotunafish](https://forum.zcashcommunity.com/u/Autotunafish)\ **Post date:** [May 27, 2021, 3:19pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/7 "2021-05-27T15:19:11Z")
Does ‘getaddr’ work? I’m unable to try rigjt now ---
**Author:** ![briansorahan](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/briansorahan/32/17831_2.png) [@briansorahan](https://forum.zcashcommunity.com/u/briansorahan)\ **Post date:** [May 28, 2021, 3:29pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/8 "2021-05-28T15:29:44Z")
Is that a zcash-cli RPC? ---
**Author:** ![Shawn](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/shawn/32/187_2.png) [@Shawn](https://forum.zcashcommunity.com/u/Shawn)\ **Post date:** [May 28, 2021, 3:46pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/9 "2021-05-28T15:46:17Z")
Blockchair has a relatively accurate tool: > **[Zcash / Node explorer](https://blockchair.com/zcash/nodes)** > > Explore Zcash (ZEC) network by looking for all accessible nodes, their countries, implementations, versions and consensus rules But even that one can’t see everything, for example nodes that are behind NAT, Tor or multiple nodes on the same IP may not show up correctly. ---
**Author:** ![Autotunafish](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/autotunafish/32/7827_2.png) [@Autotunafish](https://forum.zcashcommunity.com/u/Autotunafish)\ **Post date:** [May 28, 2021, 5:39pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/10 "2021-05-28T17:39:30Z")
No its inherent in bitcoin and is the method that crawler uses but it doesn’t seem to be supported here idk, I wonder how blockchair does it (Sounds silly maybe but what about getting peers, banning them and repeat until you stop getting peers?) (That call does seem to kind of exceed the concept of ‘least privilege’) ---
**Author:** ![Autotunafish](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/autotunafish/32/7827_2.png) [@Autotunafish](https://forum.zcashcommunity.com/u/Autotunafish)\ **Post date:** [June 1, 2021, 5:32pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/11 "2021-06-01T17:32:10Z")
It does seem to be the supported method but idk enough about the protocol to know where or when its used ---
**Author:** ![amiller](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/amiller/32/10_2.png) [@amiller](https://forum.zcashcommunity.com/u/amiller)\ **Post date:** [June 2, 2021, 1:30pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/12 "2021-06-02T13:30:18Z")
Nodes behind a NAT, and mobile apps for example, aren’t “reachable” as servers, so they’re typically not listed in these explorers. We could include Tor hidden services though ---
**Author:** ![aiyadt](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@aiyadt](https://forum.zcashcommunity.com/u/aiyadt)\ **Post date:** [June 5, 2021, 9:51pm UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/13 "2021-06-05T21:51:11Z")
Do you change the default 8 connections to allow unlimited incoming connections on your node? ---
**Author:** ![zecinv](https://avatars.discourse-cdn.com/v4/letter/z/51bf81/32.png) [@zecinv](https://forum.zcashcommunity.com/u/zecinv)\ **Post date:** [November 3, 2025, 5:11am UTC](https://forum.zcashcommunity.com/t/security-concerns-of-zcash-network/38005/14 "2025-11-03T05:11:16Z")
So the number of nodes in mainnet.zcashexplorer.app/nodes is around 136. is it correct? do we have any chart showing the number of nodes over the time?