# Security Disclosure: we remediated a vulnerability in Sprout **URL:** \ **Category:** General\ **Created:** [March 31, 2026, 7:10pm UTC](https://forum.zcashcommunity.com/t/security-disclosure-we-remediated-a-vulnerability-in-sprout/55180 "2026-03-31T19:10:13Z")\ **Posts on this page:** 1\ **Showing post:** 5
**Author:** ![Michae2xl](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/michae2xl/32/37337_2.png) [@Michae2xl](https://forum.zcashcommunity.com/u/Michae2xl)\ **Post date:** [April 2, 2026, 8:00pm UTC](https://forum.zcashcommunity.com/t/security-disclosure-we-remediated-a-vulnerability-in-sprout/55180/5 "2026-04-02T20:00:23Z")
# Hall of Fame - First one. ![Screenshot 2026-04-02 at 16.58.28](https://global.discourse-cdn.com/zcash/original/3X/e/4/e4fafdf1fab5757cec7829cf17c8209afd959070.png) check it out: [https://bountyzcash.org/](https://bountyzcash.org/) The original idea was in 2022 on the forum: [ZCG Grant Idea Thread - #19 by Michae2xl](https://forum.zcashcommunity.com/t/zcg-grant-idea-thread/41012/19) > [@Bountyzcash.org — Bug Bounty Infrastructure for the Zcash Ecosystem](https://forum.zcashcommunity.com/t/bountyzcash-org-bug-bounty-infrastructure-for-the-zcash-ecosystem/55215): > > I’m reaching out because [bountyzcash.org](http://bountyzcash.org) is live, an idea from 2022, but now it has been born: [ZCG Grant Idea Thread - #19 by Michae2xl](https://forum.zcashcommunity.com/t/zcg-grant-idea-thread/41012/19)That’s the proof of concept. Now I want to scale it. In March 2026, Alex “Scalar” Sol discovered a critical vulnerability in zcashd v3.1.0–v6.11.x: Sprout proof verification was silently skipped during block connection for nearly 6 years, exposing ~25,424 ZEC to a potential drain. Private disclosure, 72-hour coordinated patch across all 4 major mining pools, 20… --- _[View the full topic](https://forum.zcashcommunity.com/t/security-disclosure-we-remediated-a-vulnerability-in-sprout/55180)._