Zcash Approves $1.5 Million Bug Reward as Zooko Highlights $8 Million Grant Round

What to Know

• Zcash coinholders approved grants exceeding $8 million, with Zooko highlighting the network’s ability to fund contributors through community governance decisions.
• Taylor Hornby secured approval for $1.5 million in rewards for discovering and disclosing Orchard’s vulnerability through his targeted security research.
• ZODL received approval for $1.95 million covering protocol repairs, wallet development, and specifications addressing quantum recovery and consensus deployment requirements.

 

Zcash coinholders approved $1.5 million for the researcher who uncovered its Orchard counterfeiting vulnerability, recognizing work that helped protect users. According to cofounder Zooko Wilcox’s October 1 post on X, the broader retroactive grant round exceeded $8 million, demonstrating Zcash’s ability to finance contributions through community decisions.

However, the program administrator’s results announcement distinguished funding approval from payment, outlining recipient checks and arrangements for subsequent disbursement. The Financial Privacy Foundation published the voting results on September 29, listing successful applications covering security, infrastructure and development.

Security researcher Taylor Hornby received approval for two separate awards, comprising his $750,000 bounty request and an equally sized bonus. Jason McGee submitted the additional nomination independently, arguing that Hornby’s original request understated the value of his discovery.

Moreover, McGee specified that Hornby neither requested the nomination nor helped prepare it, and would receive the entire bonus. Both applications appeared among the approved proposals, bringing the researcher’s combined allocation to $1.5 million through the coinholder process.

Hornby’s application framed the reward as an incentive for responsible disclosure, particularly when researchers uncover vulnerabilities with potentially severe consequences. He also credited Shielded Labs for funding his auditing work and other Zcash teams for coordinating the security response.

Also Read: Hyperliquid Policy Center Urges EU to Clarify Rules for Onchain Derivatives

Orchard Discovery Links Researcher Rewards With Broader Protocol Security Funding

Shielded Labs engaged Hornby in April 2026 to investigate protocol weaknesses before malicious actors could identify and exploit them. Using Anthropic’s AI model during a targeted Orchard circuit review, he discovered the counterfeiting vulnerability on May 29.

Consequently, Hornby disclosed the finding to Zcash Open Development Lab engineers, prompting an emergency response across the development ecosystem. Shielded Labs reported that teams completed the fix on June 2, separating the immediate repair from subsequent network changes.

The vulnerability could have enabled unlimited counterfeit ZEC inside Orchard, although its privacy protections complicated verification of any earlier exploitation. Shielded Labs cautioned that cryptographic evidence could not conclusively establish whether attackers had previously used the flaw.

Additionally, coinholders approved ZODL’s $1.95 million application covering core protocol contributions completed between January and June 2026. Its submission included Orchard remediation, the Zallet wallet replacement and specification work addressing post-quantum recovery and consensus deployment.

Taken together, the approvals recognized both vulnerability discovery and remediation, while the administrator handles recipient verification and payment scheduling separately. Wilcox presented the outcome as evidence that Zcash’s governance can reward completed contributions through its own funding mechanisms.

Also Read: XRP and Zcash Lead Major Coins as Neon Surges 282.7%

The post Zcash Approves $1.5 Million Bug Reward as Zooko Highlights $8 Million Grant Round appeared first on 36Crypto.