zebambam

Hey Dan I'm so glad that this list is coming together so well. I'll add our address (which is currently [email protected]) soon - but of course it's a single point...

CVE-2019-7167

2

Hey. I think you should look at this to see if you're vulnerable. I've raised a ticket with github to let you know through their notification system. The CVE details...

Transcript is now at https://download.z.cash/zcashfinalmpc/transcript.cached

Replace the Seeder

36

The existing Zcash seeder is written in C (a type- and memory- unsafe language) and would be more expensive to secure to an appropriate standard as-is than it would be...

Link the Code and Protocol

13

The root cause analysis of the Sprout Wallet Balance bug (#3896) highlighted that the difficulty of correlating the code on the protocol is making the process of reconciling the code...

Test that Bech32 addresses are *only* accepted for Sapling in RPC - Finding D from 2018-12

3

Synopsis Users may be surprised by zcash-cli’s willingness to accept BIP 173-encoded addresses in transaction commands such as ​z_listunspent​ and ​z_sendmany​. Technical Details Throughout, DecodePaymentAddress (​src/key_io.cpp​) is used to decode...