Security Announcement

A bug related to transaction priority handling may allow an attacker to crash Zcash nodes (Denial of Service) via a specially crafted transaction. A fix is implemented in zcashd release 1.0.8-1.
Please see the official announcement for more details and update your Zcash node to 1.0.8-1.

Language

New Release Candidate: Less than One Week to Launch

Daira Hopwood | Oct 22, 2016

The Zcash team has been hard at work preparing for the launch, which is on track for the 28th October. Despite some hiccups due to the widespread DNS disruptions on Friday, today we deployed the fourth beta release of the Zcash reference implementation, 1.0.0-rc2, to the testnet.

The new release includes the following user-visible changes:

  1. Wallet encryption has been disabled. The reasons for disabling this feature for the time being are explained in our security warnings document. We recommend using full disk encryption for now instead. (#1552)
  2. We have included mitigations for security issues found by the NCC Group and Coinspect audits. (#1459, #1464, #1504)
  3. We have merged some changes from Bitcoin to help address potential denial-of-service vulnerabilities. (#1588, #1589, #1591)
  4. A bug that could cause assertion failures when restarting after a crash has been fixed. (#1378)
  5. A more efficient CPU Equihash solver written by John Tromp has been integrated into the built-in miner. This is not used by default, but can be enabled by adding equihashsolver=tromp to zcash.conf. Thanks go to John Tromp, and to @sarath-hotspot for providing the impetus for this improvement. (#1570, #1578)
  6. Running the node now displays a screen showing node metrics (and some pretty ASCII art ☺). (#1375)
  7. The consensus rules have been tightened to reject block and transaction versions that were previously used by Bitcoin but are not valid for Zcash. (#1556, #1600)
  8. The testnet now enforces the same rules on standard transactions as will be enforced on mainnet. (#1582, #1557)
  9. We have made changes to the getblocktemplate RPC call to support mining pools. (#1424, #1602)
  10. Improved support for deterministic builds. (#1549)
  11. Build fixes for the musl C library used by Alpine Linux. (#1558)
  12. Documentation improvements. (#1500, #1575)

For a more complete list of changes, see our 1.0.0-rc2 release github milestone.

This release resets the beta testnet. It continues to use the beta 2 proving and verify keys.

To follow our progress, watch the GitHub project and join the forum. To get an email announcement when Zcash Sprout is ready, put your email address in here.

releases, sprout, Equihash, mining, wallet encryption, deterministic builds | View all tags