Retroactive Grant Application - Ledger Zcash App Vulnerability Disclosure: Memo Crash and Device Wipe (GHSA-376f-cc2v-g94c), 당신의 스왑에 미치는 의미
요약: 헤드라인, KYC 없는 스왑에 실질적으로 닿는 부분, 오늘의 주문 체크리스트. 출처: Zcash Forum.
GitHub application: [PASTE THE GITHUB ISSUE LINK HERE] Hi all, I’m Rowan (piatoss3612 on GitHub). I’m asking coinholders for $37,500 for a completed vulnerability disclosure in Ledger’s official Zcash app. (Zcash vs 모네로 2026 비교)
Zcash Forum 완전 보도: GitHub application: [PASTE THE GITHUB ISSUE LINK HERE] Hi all, I’m Rowan (piatoss3612 on GitHub). I’m asking coinholders for $37,500 for a completed vulnerability disclosure in Ledger’s official Zcash app. Summary In September I found that the Zcash app on Ledger devices (version 3.9.3) crashed whenever a shielded transaction carried a memo with any character outside plain ASCII: an emoji, Korean text, an accented letter, even a line break. The crash happened before the review screen, so there was nothing for the user to reject. On my own Ledger Stax it did more than crash. The device rebooted into factory setup and had to be restored from the recovery phrase. I traced the root cause, verified a fix and reported it privately to Ledger on Sep 21. About 13 hours later Ledger shipped the fix in 3.9.4 for all five device models and published the advisory, GHSA-376f-cc2v-g94c , at Critical severity, crediting me as the reporter. That was two days before Ledger announced native shielded Zcash support, so users arriving with the launch installed the fixed app. Why it mattered Ordinary input triggered it. Anyone writing a memo in a non-Latin script, adding an emoji or pressing Enter would (Zcash vs 모네로 2026 비교)
실질적으로 닿는 부분. 변동성이 급등할 때, 고정된 요율은 나중에 비교할 대상이지 표류하는 대상이 아닙니다. 고정 요율 창은 바로 이런 날을 위해 존재합니다 — 견적을 받고, 창 내에서 전송하고, 이미 통제 중인 숫자 주변에서 체인이 정산하도록 하세요.
오늘 할 일. 실제로 관심 있는 페어 견적을 열고 고정 요율로 잠그고 지급·환불 주소를 설정하고 나머지는 체인에 맡기세요. 계정, 이메일, KYC 없음.
출처: Zcash Forum, 원문: https://forum.zcashcommunity.com/t/retroactive-grant-application-ledger-zcash-app-vulnerability-disclosure-memo-crash-and-device-wipe-ghsa-376f-cc2v-g94c/59194 (Zcash vs 모네로 2026 비교)