Zcash Approves $1.5 Million Reward for Orchard Vulnerability Discovery
Zcash coinholders have approved a combined $1.5 million allocation for security researcher Taylor Hornby after he uncovered a critical vulnerability in the network’s Orchard protocol, while a broader retroactive funding round exceeded $8 million.
Zcash cofounder Zooko Wilcox highlighted the outcome in an October 1 post on X, pointing to the community-approved grants as an example of the network using its own governance process to fund completed contributions.
The Financial Privacy Foundation published the voting results on September 29. The approved applications covered security, infrastructure and development work, although approval of the grants does not itself mean the recipients have already been paid.
The program administrator said recipients must undergo verification before payments are arranged.
Zcash Approves $1.5 Million Orchard Security Reward
Hornby was approved for two separate awards of $750,000 each. One was his original bounty request, while the second was submitted independently by Jason McGee as an additional nomination.
McGee argued that Hornby’s initial request did not fully reflect the significance of the vulnerability. He also stated that Hornby did not request or participate in preparing the additional nomination and would receive the entire bonus.
The two successful proposals therefore brought Hornby’s total approved allocation to $1.5 million through the coinholder funding process.
Hornby’s application described the payment as an incentive for responsible disclosure, particularly when researchers identify vulnerabilities capable of causing serious damage to a blockchain network.
He also credited Shielded Labs with supporting his auditing work and acknowledged other Zcash development teams for coordinating the response after the vulnerability was reported.
Orchard Vulnerability Led to Emergency Security Response
Shielded Labs engaged Hornby in April 2026 to examine potential protocol weaknesses before they could be discovered and exploited by malicious actors.
During a targeted review of the Orchard circuit, Hornby used Anthropic’s AI model and discovered the vulnerability on May 29. He subsequently disclosed the issue to engineers at Zcash Open Development Lab, triggering an emergency response involving teams across the development ecosystem.
Shielded Labs said the vulnerability was fixed by June 2. The immediate remediation was handled separately from later network changes associated with the broader response.
The flaw could potentially have allowed an attacker to create unlimited counterfeit ZEC within Orchard. However, Orchard’s privacy features made it difficult to determine whether the vulnerability had previously been exploited.
Shielded Labs said available cryptographic evidence could not conclusively establish whether an attacker had used the vulnerability before it was discovered.
ZODL Also Receives Approval in Retroactive Funding Round
The same voting process approved a $1.95 million application from ZODL for core protocol contributions completed between January and June 2026.
The application covered several areas of development, including work related to the Orchard vulnerability remediation, the Zallet wallet replacement, and specifications addressing post-quantum recovery and consensus deployment.
The approvals therefore span both the discovery of a major security weakness and the technical work required to address it, alongside broader infrastructure and protocol development.
While the voting process determines which proposals receive funding, recipient verification and subsequent payment arrangements remain separate administrative steps.
Wilcox characterized the broader result as evidence that Zcash’s governance system can use community-controlled funding mechanisms to compensate contributors for work already completed.
Writer: Marcus RenfieldCrypto Market Analyst & Onchain WriterMarcus Renfield covers cryptocurrency markets with a focus on onchain data, Bitcoin price action, and emerging market narratives. His writing examines how capital flows, network activity, and broader market structure influence short- and medium-term trends.He aims to provide clear, data-informed analysis for readers seeking a deeper understanding of crypto market dynamics.