Invest ideasNews
7 Jun 2026, 14:00
Monero Next? Researcher Who Found The Zcash Flaw Targets XMR For Future Audit
The security researcher, who discovered the Orchard Pool vulnerability in Zcash, says he has added other privacy-focused coins, including Monero, to his audit queue. Researcher To Audit Monero After Finding Zcash Flaw Security engineer Taylor Hornby, who used the Claude AI Opus 4.8 model, has revealed that he intends to audit Monero, among other crypto projects, in the near future. “Absolutely! I’ll add Monero to my queue of things to audit,” Hornby responded when asked on X whether he could look for bugs in XMR and other privacy-focused cryptocurrencies. The Orchard Counterfeiting flaw, which could have enabled a bad actor to mint unlimited, undetectable amounts of counterfeit ZEC tokens, had gone undetected since May 2022. Hornby discovered the counterfeiting vulnerability in Zcash’s Orchard pool on May 29 and reported it to Zcash Open Development Lab (ZODL), which coordinated an emergency network fix by June 2. The language in the public notice of the vulnerability emphasized that, while there was no evidence of exploitation, due to Zcash’s privacy property, there was no way to cryptographically confirm that the bug was not exploited during the period it went unnoticed. This impossible situation has cast doubt on the privacy feature in certain cryptocurrencies, such as Monero. Hornby explained that his close relationship with the Zcash developers and the impact of the crypto project on his life were the reasons he disclosed the flaw rather than exploiting it. Additionally, the security researcher revealed that he intends to apply for a Zcash coinholder grant while seeking voluntary donations to fund further work. The discovery of this vulnerability precipitated a level of FUD-driven capitulation in the crypto market, with ZEC losing nearly half of its value on the day. With Monero seemingly next on the list, anything less than a favorable security audit report could trigger the return of doubt into privacy-focused coins and the general cryptocurrency market. What’s The Next Move For The Privacy Coin? With no cryptographic way to confirm whether the counterfeiting vulnerability was exploited, Shielded Labs, alongside the ZODL and other key stakeholders, has launched a proposal called Ironwood. Ironwood is expected to enable users to verify the authenticity of ZEC’s circulating supply. According to the proposal, users would be able to independently verify the total circulating supply of Zcash by running a node. “As soon as Ironwood activates, users can verify from the consensus rules that no more than the correct amount of ZEC can be circulating,” the initial proposal read. As of this writing, the price of ZEC sits at around $400, reflecting an almost 4% jump in the past 24 hours.
7 Jun 2026, 09:54
Ripple CTO Emeritus Breaks Down Zcash Paradox: Why 'Lonely' Coins Aren't Lost
As Zcash (ZEC) developers race to deploy the Ironwood upgrade following a critical vulnerability, Ripple's David Schwartz explains why passive holders remain safe.
6 Jun 2026, 21:00
Zcash Suffers Historic Collapse As Billions Vanish From Market Value
The cryptocurrency market was shaken by a dramatic collapse in Zcash price, with the privacy-focused digital asset losing more than half of its value in just 24 hours. This sudden decline erased billions of dollars from its market capitalization, making it one of the most significant single-day drawdowns seen in the sector this year. What Triggered Zcash’s Dramatic Market Collapse? The dramatic collapse in Zcash may be tied to fear surrounding a recently disclosed vulnerability affecting the network’s privacy infrastructure. In a recent post on X, an analyst known as Bull Theory revealed that the biggest privacy coin lost over 50% of its value within 24 hours, erasing $5 billion from its market capitalization. This sharp selloff was hidden inside the Zcash Orchard privacy pool since May 2022 and remained undetected for nearly four years despite multiple security audits. Reports indicate that security researcher Taylor Hornby identified the issue using the Claude Opus 4.8 artificial intelligence and successfully developed a working proof-of-concept that generated counterfeit ZEC during local testing on May 29. Although the bug has now been patched as of June 2, the deeper concern is that Zcash’s privacy design makes it impossible to know if any counterfeit ZEC was minted before the fix. Unlike Bitcoin, where the total supply can be independently verified on-chain, Zcash’s privacy design makes it difficult to confirm whether any counterfeit coins were secretly minted before the fix. While the development team maintains that no fake ZEC was minted, the lack of verifiability has fueled uncertainty and panic among traders who sell their holdings. This situation highlights a fundamental trade-off between privacy and transparency. As a result, Shielded Labs is now exploring a proposed network upgrade that would allow participants to verify the integrity of the Zcash total supply, aiming to restore confidence across ZEC’s ecosystem. World-Class Security Research Remains Central To Zcash’s Development Zcash’s strength lies in the caliber of its cryptographers, security engineers, and security researchers. Co-Founder of Gemini, Cypherpunk, Winklevosscap Guitars, and Marsjunction, Cameron Winklevoss, has explained that the community is heavily focused on continuous improvement and hardening the network. This proactive approach is precisely why the project actively engages world-class security researchers to search for vulnerabilities, an effort that led to the recent discovery of a potential exploit. Winklevoss frames the incident as a positive signal rather than a cause for alarm. In complex Layer 1 systems, no blockchain network is immune to bugs. What is important is that there are world-class researchers focused on hardening the network and staying ahead of the villain. This dynamic, where elite researchers are constantly testing and strengthening the system, is fundamental to building resilient and secure infrastructure.
6 Jun 2026, 20:55
OpenAI Launches Lockdown Mode to Shield ChatGPT from Prompt Injection Attacks
BitcoinWorld OpenAI Launches Lockdown Mode to Shield ChatGPT from Prompt Injection Attacks OpenAI has introduced a new security feature called Lockdown Mode, designed to protect ChatGPT users from prompt injection attacks — a growing vulnerability where malicious instructions are hidden inside web content, uploaded files, or third-party data sources. The feature, announced on June 6, 2026, is rolling out to self-serve ChatGPT Business accounts and eligible personal accounts. What Lockdown Mode Disables When activated, Lockdown Mode restricts several ChatGPT capabilities to reduce the risk of data exfiltration. Specifically, it disables live web browsing, restricting the model to cached content only. It also blocks the retrieval and display of images from the web, though users can still generate images using DALL-E. Additionally, deep research features and agent mode are turned off. OpenAI emphasized that Lockdown Mode is not a silver bullet. The company noted that prompt injections could still appear in cached web content or uploaded files, potentially affecting response accuracy or behavior. However, the feature aims to significantly reduce the likelihood that sensitive data is inadvertently shared during an attack. Who Needs Lockdown Mode Lockdown Mode is not intended for general consumers. OpenAI explicitly states it is designed for people and organizations that handle sensitive data and require stricter protection from data exfiltration risks related to prompt injection. This includes industries such as legal, healthcare, finance, and government, where confidential information is frequently processed through AI tools. Why Prompt Injection Matters Prompt injection attacks exploit the way large language models interpret instructions. An attacker can embed hidden commands within a webpage, email, or document that, when processed by the AI, cause it to reveal private information, bypass security controls, or perform unintended actions. As enterprises increasingly integrate AI into workflows, the attack surface for such exploits has expanded, making dedicated countermeasures like Lockdown Mode a necessary addition to the security toolkit. Industry experts have long called for more robust safeguards. The introduction of Lockdown Mode signals that OpenAI is responding to real-world deployment challenges, particularly in regulated environments where compliance and data governance are non-negotiable. Comparison with Existing Security Measures Lockdown Mode complements existing protections like API rate limiting, content filtering, and data retention controls. However, it is the first feature specifically targeting the prompt injection vector at the application level. Unlike broader security policies that apply to all users, Lockdown Mode is opt-in and context-specific, allowing organizations to balance functionality with risk tolerance. Other AI providers, including Google and Anthropic, have introduced similar isolation features for their enterprise offerings, but OpenAI’s move is notable given ChatGPT’s widespread adoption across both business and personal use cases. Implications for Enterprise AI Adoption The launch of Lockdown Mode may accelerate enterprise adoption by addressing one of the most cited concerns: data leakage. For organizations that have hesitated to deploy generative AI due to security fears, this feature provides a tangible layer of control. It also sets a precedent for how AI companies can design safety features that are practical rather than purely theoretical. However, the limitations are clear. Lockdown Mode does not eliminate all prompt injection risks, and organizations must still implement comprehensive data handling policies, employee training, and monitoring systems. OpenAI’s candid acknowledgment of these gaps is a sign of maturity in the industry, but it also underscores that security remains an ongoing challenge. Conclusion OpenAI’s Lockdown Mode represents a targeted response to a specific and growing threat in AI security. While not a complete solution, it offers a meaningful layer of protection for users handling sensitive data. As prompt injection techniques evolve, features like this will likely become standard in enterprise AI platforms. For now, Lockdown Mode gives organizations a practical tool to reduce risk without abandoning the productivity gains that ChatGPT provides. FAQs Q1: What is a prompt injection attack? A prompt injection attack occurs when malicious instructions are hidden within content that an AI model processes, such as a webpage or uploaded file. The AI may then follow those hidden instructions, potentially exposing sensitive data or performing unauthorized actions. Q2: Will Lockdown Mode affect regular ChatGPT usage? Yes, but only for specific features. Lockdown Mode disables live web browsing, image retrieval from the web, deep research, and agent mode. Users can still generate images and access cached content. It is designed for high-security environments, not everyday use. Q3: Is Lockdown Mode available to all ChatGPT users? No. Lockdown Mode is currently rolling out to self-serve ChatGPT Business accounts and eligible personal accounts. OpenAI has not announced a timeline for broader availability. This post OpenAI Launches Lockdown Mode to Shield ChatGPT from Prompt Injection Attacks first appeared on BitcoinWorld .
6 Jun 2026, 15:25
Bitcoin World Live Feed: Operating Hours and Coverage Policy
BitcoinWorld Bitcoin World Live Feed: Operating Hours and Coverage Policy Bitcoin World provides real-time cryptocurrency updates through its Live Feed service, operating from 10:00 p.m. UTC on Sunday through 3:00 p.m. UTC on Saturday. Outside these hours, coverage is limited to critical market-moving developments, ensuring readers receive timely information on the most impactful events. Understanding the Live Feed Schedule The Bitcoin World Live Feed is designed to deliver continuous, up-to-the-minute cryptocurrency news and analysis during the most active trading periods. The schedule aligns with global market activity, covering the majority of the week when major exchanges and trading volumes are highest. The service pauses for a brief window from Saturday afternoon through Sunday evening, a period historically characterized by lower trading activity and liquidity across most cryptocurrency markets. Critical Coverage Outside Regular Hours Bitcoin World recognizes that the cryptocurrency market operates 24/7 and that significant events can occur at any time. Therefore, even during the Live Feed’s off-hours, the editorial team monitors for breaking developments that could affect market conditions. Critical events—such as major regulatory announcements, security breaches, significant price swings, or macroeconomic news with direct crypto market implications—will still be reported through the Bitcoin World Live app and the Bitcoin World website. This approach balances the need for comprehensive coverage with editorial resource management, ensuring that readers receive high-quality, verified information without unnecessary noise. Why This Matters for Traders and Investors For active traders and long-term investors alike, understanding the timing of live coverage is essential for planning information intake. The Live Feed’s schedule provides a predictable window for real-time updates, while the off-hours policy ensures that only truly consequential news breaks through. This structure helps readers avoid information overload while still staying informed about events that could impact their portfolios. The Bitcoin World Live app serves as a reliable secondary channel for urgent updates, offering push notifications for critical developments regardless of the time. Conclusion The Bitcoin World Live Feed’s operating hours reflect a strategic balance between continuous coverage and editorial quality. By focusing real-time updates on the most active market periods and reserving off-hours for only the most significant news, Bitcoin World aims to provide readers with trustworthy, actionable information. For breaking international economic news, the Bitcoin World Live app and website remain available around the clock. FAQs Q1: What are the exact operating hours of the Bitcoin World Live Feed? The Live Feed operates from 10:00 p.m. UTC on Sunday through 3:00 p.m. UTC on Saturday, covering the most active trading periods of the week. Q2: Will I miss important news during the off-hours? No. Critical market-moving developments are still reported through the Bitcoin World Live app and website, even when the Live Feed is not actively updating. Q3: How do I receive urgent updates outside the Live Feed schedule? You can enable push notifications on the Bitcoin World Live app or regularly check the Bitcoin World website for breaking news alerts. This post Bitcoin World Live Feed: Operating Hours and Coverage Policy first appeared on BitcoinWorld .
6 Jun 2026, 11:45
Zcash Flaw Discoverer Taylor Hornby Plans to Add Monero to Audit Queue
BitcoinWorld Zcash Flaw Discoverer Taylor Hornby Plans to Add Monero to Audit Queue Security engineer Taylor Hornby, who recently uncovered a critical vulnerability in Zcash (ZEC) using Anthropic’s Opus 4.8 AI model, has confirmed plans to review Monero (XMR) as part of his ongoing audit work. The announcement, shared on X and reported by CoinDesk, signals a significant development for the privacy-focused cryptocurrency community. Discovery and Immediate Market Impact Hornby discovered the Zcash flaw on May 29. The vulnerability, which could have potentially allowed hackers to drain funds from Zcash’s privacy pool for years, sent shockwaves through the market. Following the news, Zcash’s price dropped by 38% within 24 hours, highlighting the severe financial consequences that can result from security weaknesses in digital assets. Monero in the Crosshairs When asked on social media whether he would investigate similar issues in Monero and other privacy-focused cryptocurrencies, Hornby confirmed he would add Monero to his audit queue. This decision places Monero, another leading privacy coin, under the microscope of a security researcher known for using advanced AI tools to identify complex vulnerabilities. Why This Matters for Privacy Coin Users Privacy cryptocurrencies like Zcash and Monero are designed to obscure transaction details, offering users financial anonymity. However, the complexity of their underlying technology can also hide critical security flaws. Hornby’s use of AI to find a bug that may have existed for years underscores the evolving nature of cybersecurity threats in the crypto space. For investors and users, this event serves as a reminder that even the most robust systems require continuous, independent auditing. Conclusion The discovery of a major flaw in Zcash, followed by the promise of a Monero audit, represents a pivotal moment for privacy coin security. Taylor Hornby’s work demonstrates the growing role of AI in vulnerability research, and his next audit will be closely watched by the cryptocurrency community. The incident also reinforces the importance of proactive security measures for maintaining trust in digital assets. FAQs Q1: What was the Zcash flaw discovered by Taylor Hornby? A: The flaw was a critical vulnerability in Zcash’s privacy pool that could have allowed hackers to potentially steal funds. Hornby identified the bug using Anthropic’s Opus 4.8 AI model. Q2: Why is Taylor Hornby auditing Monero? A: Hornby was asked on social media if he would investigate Monero and other privacy coins. He confirmed he would add Monero to his audit queue, aiming to uncover potential security issues similar to the Zcash flaw. Q3: How did the market react to the Zcash flaw? A: Following the news of the vulnerability, Zcash’s price fell by 38% within 24 hours, reflecting investor concern over the security of the network. This post Zcash Flaw Discoverer Taylor Hornby Plans to Add Monero to Audit Queue first appeared on BitcoinWorld .
