Price:

BITCOIN

Zcash trust collapses after hidden inflation bug and secret fix

Wednesday, June 10, 2026 · from 2 podcasts
  • A hidden Zcash bug enabled infinite, undetectable counterfeiting, crashing its market by $3 billion.
  • Developers secretly fixed it via a closed-door soft fork with miners, proving centralization.
  • The flaw exposed a fatal privacy paradox: if you can't audit supply, you can't trust the money.

Zcash just demonstrated the ultimate risk of a private cryptocurrency: when no one can see the money supply, no one can trust it.

A critical bug discovered in Zcash's Orchard privacy pool allowed for infinite, undetectable minting of counterfeit tokens. Because transactions in the shielded pool are opaque, there is no cryptographic way to prove the flaw wasn't exploited before the patch, rendering the entire asset's supply integrity a matter of faith. Following the news, trader Arthur Hayes dumped his entire Zcash position, and the market cap plunged by $3 billion.

Instead of a transparent disclosure, the Zcash development team coordinated a secret soft fork with a handful of dominant miners to freeze the compromised pool. On Rabbit Hole Recap, Matt Odell and Marty Bent argued this proves the project's centralization: if three people can freeze billions in a midnight meeting, the privacy claims are a facade.

"This level of centralization proves the project's fragility. It isn't a decentralized protocol; it’s a managed experiment with a single point of failure."

- Matt Odell & Marty Bent, Rabbit Hole Recap

The episode validates a core Bitcoin maximalist critique. Bitcoin's transparent, auditable ledger provides verifiable scarcity; Zcash's privacy shield creates an unverifiable supply, which is fatal for a currency's value proposition.

Developers are now debating a 'turnstile' accounting system to verify funds exiting the compromised pool, but the damage to trust is structural. The market's 30% collapse is a direct verdict: when privacy makes verification impossible, the asset becomes worthless.

Source Intelligence

- Deep dive into what was said in the episodes

Zcrash | Bitcoin NewsJun 5

  • Zcash's price fell 30% after security engineer Taylor Hornby disclosed a critical vulnerability in its Orchard pool that allowed unlimited counterfeit ZEC creation. The bug existed since May 2022 and was patched via a hard fork on June 3.
  • BitMEX co-founder Arthur Hayes sold his entire Zcash position due to the exploit, stating the Holy Trinity is dead, referencing ZEC, Hyperliquid, and NEAR Protocol. He remains a Bitcoin holder.
  • Michael Saylor framed Bitcoin's 22.7% drop as capital rotation into AI infrastructure, not a fundamental impairment. He cited $400 billion in AI buildout funding over six months and $4 billion in Bitcoin ETF outflows since May 14.
  • Major equity indices faced steep declines, with the NASDAQ down 4.3% and the S&P 500 down 2.3%. Bitcoin traded near $59,330 with a market cap of $1.19 trillion and a network hash rate of 905 exahashes per second.
Also from this episode: (6)

Markets (2)

  • Saylor's firm, MicroStrategy, sold 32 Bitcoin in early June, breaking a no-sale streak since late 2022. The firm also repurchased $1.5 billion of its convertible notes at an 8% discount, reducing its outstanding debt.
  • Oil and metals saw broad declines, with West Texas Intermediate crude down 2.5% to $90.66, gold down 3.6%, and silver down 7.8%. Rough rice was a rare commodity in the green, up 0.48%.

Banking (1)

  • JP Morgan, Bank of America, and Citi plan to launch a shared tokenized deposit network called the Bridge or the Chain by 2027. The Clearinghouse will operate it to counter stablecoin competition and retain deposits within the banking system.

Mining (2)

  • Bernstein analysts argue Bitcoin miners are becoming power landlords for the AI boom, having signed 17 deals worth over $110 billion to provide six gigawatts of power to companies like Google and Microsoft.
  • Bernstein projects aggregate AI revenue for covered mining firms will rise from $1.2 billion in 2026 to $10.7 billion by 2030. TeraWulf is forecast to hit $1.7 billion in AI revenue with 84% EBITDA margins.

Coding (1)

  • Anthropic reported its AI model Claude now authors over 80% of code merged into its codebase, increasing engineer output eightfold since 2024. The firm notes this trend points toward possible recursive self-improvement where AI designs its successors.

RABBIT HOLE RECAP #412: STAY HUMBLE AND STACK SATSJun 4

  • Marty notes Bitcoin's price has dropped to early February levels, with WTI oil prices 50% higher now than when Bitcoin was at similar prices back then.
  • MicroStrategy sold 32 BTC for $2.5 million, which hosts speculate was a round-number decision to cover dividend obligations, not a significant meme amount.
  • The hosts argue Stretch and SATA bonds are not risk-free, pointing out they recently traded at discounts to par ($95.52 and $96.54) and carry significant counterparty risk dependent on Michael Saylor's priorities.
  • Marty argues on-chain data dashboards are increasingly irrelevant because a huge portion of the Bitcoin market is now held in custodial accounts, not self-custody wallets.
  • A Zcash developer team found an undetectable infinite inflation bug in its newest privacy pool, froze the pool via a soft fork, and forced a hard fork to fix it without full transparency, creating a potential bank run scenario.
  • The hosts view Zcash's centralized response - where three people could freeze a pool holding billions of dollars - as proof of its inferior censorship resistance compared to Bitcoin.
  • Marty claims it was an open secret in New York circa 2016-2017 that an inflation bug on Monero was being exploited to buy more Bitcoin, though it can't be proven.
  • Treasure disclosed a laser fault injection attack vulnerability in its open-source Tropic 01 secure element chip but asserts user funds in the Treasure Safe 7 are safe because it requires compromising a second, closed-source secure element.
  • The Blockchain Association's letter supporting the Digital Asset Market Clarity Act is signed by over 60 former national security and law enforcement officials, which the hosts see as a negative signal that the bill expands financial surveillance.
  • Marty argues KYC/AML regulations are primarily a facade for tax enforcement, not crime prevention, citing the $600 Venmo reporting threshold as a tool to ensure plebs pay taxes.
  • Prediction markets like Polymarket have an unsolvable oracle problem, highlighted when it ruled a 'yes' bet on a MicroStrategy Bitcoin sale as 'no' because the sale was announced after the contract deadline.
  • Cala announced a trust-minimized Cashu mint using a trusted execution environment, where mint keys are generated within a secure enclave, preventing operator inflation or access to Bitcoin reserves.
  • Strike added phishing protection via in-app code words, a practical update given email leaks from other services like Ledger.
Also from this episode: (2)

Payments (1)

  • The hosts speculate recent US sanctions seizures targeting Iranian crypto exchanges likely involved freezing stablecoins like Tether through backdoor portals, not seizing Bitcoin.

AI & Tech (1)

  • Anthropic's fundraising claims that AI development is accelerating, with Claude now writing code at parity with humans and achieving a 52x speed-up on a model optimization task in May.