Retroactive Grant Application - zcashd Medium Severity V4 Sapling Parsing Mismatch (GHSA-3jg6-49c6-q99v)

I have submitted a Q4 retroactive grant application on GitHub (#75) , requesting $37,500 USD for GHSA-3jg6-49c6-q99v , a completed Medium severity disclosure concerning a V4 Sapling transaction parsing mismatch between zcashd and Zebra. GitHub displays this severity as Moderate . Shared background with my High severity proposal My earlier forum post on the High severity finding sets out the shared background: the Q3 approvals for critical vulnerability research, recent published security findings, and the opportunity to discuss how researchers’ contributions to Zcash’s security should be rewarded. This application brings the same discussion to a separate Medium finding , with its own technical record, practical trigger conditions, and proposed amount. The Q3 references and recent release data are available in that forum thread. The vulnerability and my contribution For a V4 Sapling transaction with no Sapling spends or outputs, the serialized valueBalanceSapling must be zero. The malformed case has: Serialized field Value nSpendsSaplin