Security Disclosure: we remediated a vulnerability in Sprout

[Michae2xl]

Hall of Fame - First one.

check it out: https://bountyzcash.org/

The original idea was in 2022 on the forum: ZCG Grant Idea Thread - #19 by Michae2xl

Bountyzcash.org — Bug Bounty Infrastructure for the Zcash Ecosystem

I’m reaching out because bountyzcash.org is live, an idea from 2022, but now it has been born: ZCG Grant Idea Thread - #19 by Michae2xl That’s the proof of concept. Now I want to scale it. In March 2026, Alex “Scalar” Sol discovered a critical vulnerability in zcashd v3.1.0–v6.11.x: Sprout proof verification was silently skipped during block connection for nearly 6 years, exposing ~25,424 ZEC to a potential drain. Private disclosure, 72-hour coordinated patch across all 4 major mining pools, 20…