Zano在网关漏洞后回滚区块链至较早高度

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

Zano在网关漏洞后回滚区块链至较早高度

2026-09-28 12:10:58

Bookmark

Zano core team restarts blockchain, rolling back about a month of activity to fix "gateway address" vulnerability

Zano core team has restarted the Zano blockchain with the aim of revoking about a month of activity records. The move is to fix a vulnerability related to "Gateway Addresses" that allowed unauthorized ZANO and Freedom Dollar (fUSD) tokens to enter circulation. This restart returns the chain state to block 3,833,000-the block before the introduction of the affected functionality in the sixth hard fork. According to project leadership, the recovery will only be fully effective after participating nodes, miners, pledgers, exchanges and other service providers adopt the updated software. The team stated that transactions and token activity that occurred during the compromised/exploited period will no longer appear on the restored chain. However, they also warned that rolling back operations cannot reverse transactions that have been settled on other blockchains.

Key Points

Zano restarted the chain at block 3,833,000, rolling back about a month-long history associated with the vulnerability affecting the "gateway address."
The reset is for activity after the deployment of the 6th hard fork feature, which means that affected transactions will not appear on the restored chain.
Participating nodes, miners, pledgers, exchanges and other infrastructure providers must upgrade software to complete the recovery.
Zano said it would publish compensation and claims processes to resolve losses, but cross-chain settlement could not be revoked.

回滚机制：改变了什么以及什么不可逆转

项目方指出，该漏洞的影响仅限于第 6 次硬分叉之后，“网关地址”引入的时期。通过从区块 3,833,000 开始重启网络，Zano 使该区块之后的所有合法交易无效，并撤销了漏洞铸造或引入的任何未经授权 ZANO 和 fUSD 代币。这对用户和服务运营商至关重要，因为它有效地重置了该时间段的链上记录。任何依赖回滚窗口内交易的人——无论是用于余额管理、会计核算还是自动化工作流程——都需要根据恢复后的链状态重新处理这些事件。同时，团队明确划定了可行性的边界。虽然回滚可以改变 Zano 本身认可的内容，但它无法撤销已在其他地方最终确定的交易。对于通过跨链转账或其他外部系统转移价值的用户而言，项目方的更新意味着仅靠链重启可能无法追回与已结算的外部支付相关的损失。

什么是“网关地址”，以及为何成为攻击目标

Zano 表示尚未发布完整的事故后分析报告，但确认漏洞源于“网关地址”。该功能旨在通过允许桥接服务、交易所和支付服务通过单一账户式余额模型管理资金，从而简化集成流程。在引入“网关地址”之前，Zano 钱包将资金跟踪为单独的交易输出（UTXO），而不是合并的账户余额。这一差异影响了交易所和支付处理器的工作方式：服务必须扫描区块链以识别 incoming payments（入金），跟踪哪些输出对应客户存款，并在用户请求提款时选择合适的输出。相比之下，账户式抽象可以简化集成逻辑——特别是对于那些希望拥有统一余额视图的服务。然而，Zano 团队决定在网络中“立即在第 6 次硬分叉之前”回滚，这表明该抽象层引入了新的攻击面，且未得到充分控制。Zano 的公共浏览器显示，周日发生了回滚，反映了链重置及回到第 6 次硬分叉前状态的过程。项目在摘录的信息中未提供额外的技术细节，但明确指出“网关地址”有助于将根本原因缩小到该功能，而非核心交易隐私本身。

代币供应量、信任以及重启的理由

Zano 领导层将重启视为短期中断与长期信誉之间的权衡。市场与增长负责人 Quinten van Welzen 认为，“无所作为”意味着未经授权的 ZANO 和 fUSD 将无限期留在流通中——稀释持有者的价值并破坏固定供应量的概念。Van Welzen 还暗示，允许受损害的供应量存在，会向未来的攻击者发出信号，让他们知道在漏洞利用后可以保留价值。在这种观点下，最具破坏性的后果不仅是技术层面的突破，更是它为对手树立的先例。他表示，从一个较早的区块重启确实伴随着真实成本：它消除了大约一个月的区块链历史，并要求社区重建信任。尽管如此，团队的立场是，恢复预期的供应量并从干净的状态重新开始，提供了一条值得中断代价的回归之路。

为何交易所和验证者在修复中处于核心地位

Zano 的恢复取决于社区的采纳。团队表示，参与节点、矿工、质押者、交易所及其他服务提供商必须采用更新，以便网络在恢复后的链状态下稳定下来。对于机构和高吞吐量运营商而言，这一点尤为重要，因为延迟升级可能导致余额不一致、重复处理或交易历史记录不匹配。对于交易者和用户来说，含义很简单：基础设施的准备程度将决定服务收敛到恢复账本的速度。特别是对于交易所，回滚也影响存款和取款核算——因此运营商可能需要重新同步交易历史记录，并确保客户记录与恢复后的状态相匹配。与此同时，Zano 正在努力核算损失。团队表示将公布赔偿和索赔流程，一旦细节发布，这将成为受影响各方的关键参考。在此之前，对用户而言唯一完全可靠的结论是：来自受损期间的交易预计将从恢复的链上消失，而任何已在 Zano 之外结算的活动可能无法通过回滚进行逆转。展望未来，读者应关注承诺的赔偿/索赔说明以及任何澄清“网关地址”具体如何被利用的技术后续报道，因为这些细节很可能决定集成商如何调整其系统，以及在第 6 次硬分叉回滚后信心能多快重建。

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article