An AI model helped uncover a four-year-old Zcash vulnerability that could have enabled unlimited counterfeit token issuance before it was remediated. Security experts told CoinDesk the incident shows why AI-assisted formal verification may become critical for crypto networks and traditional financial software.
An AI model helped uncover a four-year-old Zcash vulnerability that could have enabled unlimited counterfeit token issuance before it was remediated. Security experts told CoinDesk the incident shows why AI-assisted formal verification may become critical for crypto networks and traditional financial software.
The case matters because it shows how more capable AI systems can surface flaws that may have sat undetected in critical financial code for years. CoinDesk reported that researchers and investors are now warning that similar hidden vulnerabilities could exist not only across other crypto systems, but also in software used by banks and centralized financial institutions.
An artificial intelligence model helped Shielded Labs uncover a four-year-old bug in Zcash that could have allowed an attacker to create unlimited counterfeit tokens, according to CoinDesk. Zcash said the vulnerability has been remediated, but the disclosure triggered alarm across the crypto sector and coincided with a nearly 38% drop in the token over 24 hours.
The case matters because it shows how more capable AI systems can surface flaws that may have sat undetected in critical financial code for years. CoinDesk reported that researchers and investors are now warning that similar hidden vulnerabilities could exist not only across other crypto systems, but also in software used by banks and centralized financial institutions.
Dragonfly managing partner Haseeb Qureshi framed the discovery as a reason to harden software rather than as a reason to reject AI. His view, as reported by CoinDesk, is that the same class of AI tools exposing weaknesses can also help deliver stronger defenses through formal verification.
Formal verification is a method of proving that software satisfies defined mathematical properties, and several experts cited by CoinDesk described it as a long-term defense for mission-critical code. Ethereum co-founder Vitalik Buterin has also argued that AI-assisted formal verification could become increasingly important as AI makes vulnerability discovery easier.
The challenge is implementation. SingularityNET CEO Ben Goertzel told CoinDesk that formal verification requires extra work, while CertiK co-founder Ronghui Gu warned that attackers can concentrate large amounts of AI compute on a single target, creating an uneven security race for firms defending many clients at once.
The Zcash episode is now being treated as a broader warning for financial software. As AI systems become better at finding and combining weaknesses, the pressure is rising on crypto developers, security firms and financial institutions to move vulnerability detection and mathematical assurance deeper into everyday engineering workflows.
Keep exploring
Bitget plans to exit the Japanese market and close all remaining positions by the end of the year. The move adds to ongoing shifts among crypto companies navigating Japan’s regulatory environment.
Read
CoinDesk’s State of Crypto coverage counts down recent developments shaping the crypto policy and market landscape. The report frames these changes as important for how companies and participants navigate the sector.
Read
Strategy said it is holding the dividend on its STRC preferred stock at 12%. The decision keeps the payout unchanged for investors in the company’s yield-focused security.
Read