Zcash
The Zcash Foundation has outlined seven security fixes included in Zebra seven as node operators enter the final stage of preparation for the network’s NU Seven mainnet upgrade, with activation still planned for around early November. The update reinforces that operators must upgrade before the scheduled activation block to remain on the network’s consensus chain.
While Zebra seven was released earlier, the latest engineering update consolidates the remaining operational requirements ahead of the protocol transition. The release addresses seven security vulnerabilities, with the foundation describing most of them as issues that could allow malicious peers to stall node synchronization, consume verification resources, or cause honest peers to be incorrectly banned. The remaining vulnerability could cause the zebrad node process to crash.
The security disclosures place particular emphasis on availability rather than consensus integrity. According to the foundation, none of the reported issues allowed invalid blocks to be written to disk, created chain forks, or affected user funds. Instead, the vulnerabilities primarily targeted node reliability during synchronization, making the upgrade especially important for operators bringing nodes online or catching up with the chain.
The release classifies five of the advisories as high severity and two as medium severity. The high-severity issues include checkpoint synchronization failures, insufficient penalties for invalid transparent scripts, expensive signature verification scenarios, and a transaction validation path capable of occupying verification threads. The medium-severity flaws involve a crash scenario during peer disconnection and a case where an honest peer could be incorrectly banned after relaying a transaction that would become valid at the next block.
One checkpoint-related advisory illustrates the operational impact. An unauthenticated peer could provide a forged block body that prevented a synchronizing node from making further progress until it restarted. Because the affected node incorrectly marked missing blocks as already downloaded, it failed to request valid replacements. A related checkpoint vulnerability could also leave verification state temporarily inconsistent after a failed commit, although restarting restored synchronization.
Beyond security fixes, the upgrade introduces operational changes that node operators must account for. Zebra migrates its stored database from one internal format to another during the first startup after upgrading, eliminating the need for a fresh synchronization. However, previous software versions cannot read the updated format, meaning operators who later downgrade would need to perform a complete resynchronization. The foundation recommends backing up the existing database before upgrading.
Monitoring infrastructure also requires attention. Peer metrics no longer expose individual address and user-agent labels, meaning dashboards and alerting systems built around those fields will require adjustments. The foundation also notes that Zebra seven carries a shorter support window than typical releases, increasing the importance of timely maintenance planning.
The broader NU Seven upgrade reshapes Zcash’s block production cadence while preserving its monetary policy. Under ZIP two one eight, the network reduces target block spacing from seventy-five seconds to twenty-five seconds, shortening the time between new blocks for payments, exchange deposits, and cross-chain activity. Daily issuance remains unchanged because block rewards are proportionally adjusted, preserving both the network’s four-year halving schedule and its fixed supply cap.
The upgrade also changes how transaction fees are distributed. A new fee reserve diverts a majority of transaction fees for future rewards while the remainder continues flowing to miners, reflecting a structural adjustment to network incentives without altering the overall issuance schedule.
Mining performance has emerged as another focus during the rollout. After developers received reports during the Zcon conference about slow mining template creation, block acceptance, and transaction relay, the foundation published a separate alpha release known as Zebra Ándale. The experimental version replaces polling delays with responses tied to verified transactions and mempool updates, with developer benchmarks indicating substantially faster template creation during periods of heavy transaction activity.
Supporting infrastructure is also being updated before activation. Zeeder has added NU Seven protocol support so upgraded nodes continue recognizing its advertised protocol version after activation, and seeder operators have been instructed to deploy the update beforehand. The foundation is also reviewing optional block pruning as a future storage optimization while continuing to keep full-chain storage as the default configuration.
Taken together, the latest engineering update suggests that the remaining work before activation centers less on introducing new protocol features and more on ensuring operational readiness. For node operators, timely software upgrades and infrastructure adjustments will determine whether systems continue participating on the upgraded Zcash network once NU Seven takes effect.
