Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
ZEC The Zcash Foundation urges upgrades to Zebra 6.4.2 to fix key vulnerabilities, and the countdown to the NU7 upgrade
The Zcash Foundation has urgently called on major network operators to install Zebra 6.4.2 to fix a security vulnerability that allows network peers to crash through abnormal transactions. Zebra 6.4.x series will cease support around November 2, so main-network operators must complete the upgrade before NU7 's tentative main-network launch date of November 5.
Emergency security patches and version recalls
The Zcash Foundation emphasizes that main-network operators must deploy Zebra 6.4.2 as soon as possible to address this serious vulnerability that can be exploited remotely. According to the foundation's update announcement, the development team released four versions of Zebra between September 21 and October 5. These releases combine security fixes, wallet support improvements, transaction fee reductions, and preparations for NU7 network upgrades.
Among them, Zebra 6.4.2 specifically solves a key Bug: any network peer can cause the affected node to crash by sending abnormal transaction data. The vulnerability was discovered by the Google OSS-Fuzz project and prompted developers to recall Zebra 6.4.0 and 6.4.1 versions and withdraw the relevant release binaries. The new version incorporates improvements from two previous recalled versions, while Zebra 6.3.0 and earlier versions are not affected by this crash.
Network protection mechanism enhancement
Recent code changes have strengthened protection against malicious peers. These include restricting blocked participants from reconnecting through adjacent IPv6 addresses; introducing a penalty mechanism for relay tampering with blocks; and shortening the blocking period from indefinite to 24 hours. In addition, Zebra 6.4.1 also fixes a synchronization issue that may cause nodes to stall after restarting near the end of the chain.
NU7 test network launch and main network transition arrangements
NU7 was launched on the public test network on October 4, with a corresponding block height of 4,465,026 and activated through Zebra 7.0.0-rc.0 (first candidate release). Developers have shortened Zebra's support window from 15 weeks to 12 weeks, which means the 6.4.x series will end around November 2. Primary network operators must install upcoming production versions by this deadline to ensure continued operation during network transition. Currently, November 5 is still the tentative date for activation of the main network, but developers have not yet determined the specific activation block height.
Analysis of NU7 core upgrade content
Under the NU7 upgrade, the target block interval time will be greatly shortened from 75 seconds to 25 seconds, thereby reducing the average waiting time for initial confirmation. Daily ZEC circulation remains unchanged, and the adjustment to block rewards is aimed at maintaining the existing supply schedule and halving framework.
同时，NU7规定将60%的交易费存入储备金，并通过未来的挖矿奖励逐步分配资金。针对屏蔽交易活动的新限制措施，也将减轻垃圾交易给轻量级钱包带来的同步负担。目前，主网运营商正在等待NU7的最终发布，而开发者则在测试网环境下评估升级效果，为正式部署做准备。
