{"id":23818,"date":"2026-09-28T04:51:10","date_gmt":"2026-09-28T04:51:10","guid":{"rendered":"https:\/\/cryptoted.net\/index.php\/2026\/09\/28\/zano-restarts-chain-at-block-3833000-after-exploit\/"},"modified":"2026-09-28T04:51:10","modified_gmt":"2026-09-28T04:51:10","slug":"zano-restarts-chain-at-block-3833000-after-exploit","status":"publish","type":"post","link":"https:\/\/cryptoted.net\/index.php\/2026\/09\/28\/zano-restarts-chain-at-block-3833000-after-exploit\/","title":{"rendered":"Zano restarts chain at block 3,833,000 after exploit"},"content":{"rendered":"<p> <br \/>\n<br \/><img decoding=\"async\" src=\"https:\/\/media.crypto.news\/2025\/06\/crypto-news-Hackers-keep-exploiting-audited-DeFi-protocols-option01.webp\" \/><\/p>\n<div>\n<p class=\"is-style-lead\">Zano has restarted its blockchain from block 3,833,000 after a Gateway Address vulnerability allowed unauthorized ZANO and Freedom Dollar tokens to enter circulation, removing roughly one month of network history.<\/p>\n<div id=\"cn-block-summary-block_09dbb9c40a46afbe008373158f705f18\" class=\"cn-block-summary\">\n<p>\n        <span class=\"tabs__item is-selected\">Summary<\/span>\n    <\/p>\n<div class=\"cn-block-summary__content\">\n<ul class=\"wp-block-list\">\n<li>Zano restarted from block 3,833,000, removing roughly one month of transactions after the Gateway exploit.<\/li>\n<li>Gateway Address vulnerability allowed unauthorized ZANO and fUSD to enter circulation without compromising wallet keys.<\/li>\n<li>MEXC suspended ZANO and FUSD deposits and withdrawals while services migrate to the recovered chain.<\/li>\n<li>Zano says reimbursement will use developer, team and large-holder funds without issuing additional ZANO tokens.<\/li>\n<li>ZANO fell more than 12% over 24 hours as the network recovery process continued Sunday.<\/li>\n<\/ul><\/div>\n<\/div>\n<p><!-- .cn-block-summary --><\/p>\n<p>Zano\u2019s core team <a href=\"https:\/\/x.com\/zano_project\/status\/2104133054880964919?s=20\" target=\"_blank\">said<\/a> Sunday that the chosen block sits immediately before Hard Fork 6, which activated the Gateway Address feature in August. The emergency recovery requires miners, stakers, nodes, exchanges, pools and other services to install updated software and follow the recovered chain.<\/p>\n<p>Transactions confirmed during the affected month no longer form part of the recovered blockchain. Users have been told to keep transaction IDs and trading records while checking the status of earlier transfers before sending payments again.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Zano network update: Recovery solution for Gateway Address vulnerability<\/p>\n<p>The core team has identified a serious issue involving Gateway Addresses, which enabled unauthorized ZANO and fUSD to enter circulation.<\/p>\n<p>Our investigation has found no compromise of wallet spend keys or\u2026<\/p>\n<p>\u2014 Zano (@zano_project) <a href=\"https:\/\/x.com\/zano_project\/status\/2104133054880964919?ref_src=twsrc%5Etfw\">September 27, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The rollback cannot reverse transactions completed outside Zano. Assets already settled as USDT, DAI or other tokens on separate networks remain outside the reach of the chain restart, according to the project.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<h2 class=\"wp-block-heading\"><strong>Zano rollback removes Gateway Address activity since Hard Fork 6<\/strong><\/h2>\n<p>Hard Fork 6 went live at block 3,833,000 on Aug. 26, bringing Gateway Addresses and several other protocol changes to Zano. The project had spent more than a year developing the address system before deployment.<\/p>\n<p>Gateway Addresses were built for exchanges, bridges and payment providers that found Zano\u2019s normal unspent transaction output model difficult to integrate. Unlike ordinary Zano wallets, the new addresses keep an account-style balance directly on the blockchain.<\/p>\n<p>Before the upgrade, service operators had to scan outputs, track incoming transactions and manage which outputs were spent during withdrawals. Gateway Addresses were intended to give those operators one balance while preserving the privacy features used by ordinary Zano transactions.<\/p>\n<p>Registration required a one-time fee of 100 ZANO, which the protocol permanently burned. Zano forum records showed at least two Gateway Addresses were registered during the feature\u2019s first week on mainnet.<\/p>\n<p>The team has not yet released the promised technical post-mortem explaining precisely how the vulnerability produced unauthorized assets. Its recovery notice said the issue affected asset issuance through Gateway Addresses, including native ZANO and fUSD.<\/p>\n<p>According to the project\u2019s investigation, ordinary transaction privacy and wallet spend keys were not compromised. The team described Zano\u2019s underlying consensus as unaffected and said the emergency release removes activity created through the vulnerable feature.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Emergency release requires services to choose the recovered chain<\/strong><\/h2>\n<p>A new Zano software release, version 2.2.3.600, appeared during the recovery process, according to the project\u2019s official forum. Node operators, miners, stakers, pools and service providers were urged to install the emergency software and verify the published checksums.<\/p>\n<p>Ordinary wallet users can install the updated wallet without entering their seed phrases. Zano has begun restoring its own services individually, including its mobile wallet node and wrapping service.<\/p>\n<p>Third-party platforms must update separately. Zano warned users to confirm whether an exchange, wallet, bridge or payment provider has migrated before sending funds through those services.<\/p>\n<p>MEXC has temporarily suspended deposits and withdrawals for both ZANO and FUSD following a request from the project team. The exchange had not announced a restart time when the notice was published.<\/p>\n<p>The recovery depends on network participants accepting the new software. Quinten van Welzen, Zano\u2019s head of marketing and growth, rejected descriptions suggesting the team could unilaterally erase blockchain history.<\/p>\n<p>\u201cThe team can\u2019t roll back Zano,\u201d van Welzen said, explaining that developers can release software and ask network operators to adopt it.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Today, I&#8217;ve read the criticism of how Zano handled the Gateway Address exploit, including from people I consider friends of the project. A lot of it is fair, and I want to respond personally.<\/p>\n<p>First, we made mistakes. A bug made it into Hard Fork 6 and went unnoticed for weeks.\u2026<\/p>\n<p>\u2014 Quinten (Mr. Kwibs) | Zano (@Mr_Kwibs) <a href=\"https:\/\/x.com\/Mr_Kwibs\/status\/2104287693609832488?ref_src=twsrc%5Etfw\">September 27, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>He acknowledged that major mining pools carry substantial weight in deciding which chain receives support and said a larger base of independent operators would strengthen Zano.<\/p>\n<p>The situation has parallels with other recent blockchain recovery attempts. In related coverage, <a href=\"https:\/\/crypto.news\/cronos-restarts-network-after-emergency-halt-over-tectonic-exploit\/?utm_source=chatgpt.com\" target=\"_blank\">crypto.news reported<\/a> that Cronos validators restored the chain to a pre-exploit state after the Tectonic incident.<\/p>\n<p>A later Cronos post-mortem found that validators reversed roughly USD 111.2 million of affected value, while USD 9.19 million remained outside the recovery after funds moved away from the network.<\/p>\n<p>Crypto.news separately <a href=\"https:\/\/crypto.news\/harmony-plans-chain-rollback-as-forged-one-spreads-across-network\/?utm_source=chatgpt.com\" target=\"_blank\">reported on Harmony\u2019s proposed rollback<\/a> after forged ONE entered circulation in August. The proposed recovery risked discarding more than 109,000 ordinary transactions.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Zano plans reimbursement without issuing new tokens<\/strong><\/h2>\n<p>The month-long rollback invalidates legitimate payments made alongside the unauthorized token activity, leaving exchanges, businesses and users with records that may no longer match the recovered blockchain.<\/p>\n<p>Zano said it is working with affected projects and counterparties to calculate losses. A formal reimbursement and claims process has yet to be published.<\/p>\n<p>Van Welzen said funding would come from the development fund, team holdings and large holders who have committed resources to the recovery. He said the reimbursement plan would not involve creating extra ZANO.<\/p>\n<p>\u201cA month of payments between people\u201d makes reimbursement complex, he said, while acknowledging that the team had not settled every part of the claims process.<\/p>\n<p>The project initially described a much shorter rollback while investigators were still determining the scale of the flaw. Van Welzen later acknowledged that early communications referring to \u201c24 hours\u201d and \u201cno other choice\u201d were issued before the team fully understood the incident.<\/p>\n<p>Restarting from the pre-Hard Fork 6 block ultimately expanded the affected period to roughly one month. The team said the deeper rollback removes unauthorized ZANO and fUSD from the recovered chain.<\/p>\n<p>Zano plans to publish the technical cause of the exploit, findings from a review of related Gateway Address code and conditions that must be met before the feature can return. No date has been announced for reactivating Gateway Addresses.<\/p>\n<h2 class=\"wp-block-heading\"><strong>ZANO price falls as recovery continues<\/strong><\/h2>\n<p>ZANO traded near USD 6.32 during the recovery, down roughly 12.85% over 24 hours, <a href=\"https:\/\/coinmarketcap.com\/currencies\/zano\/\" target=\"_blank\">according<\/a> to CoinMarketCap. Its reported market capitalization stood near USD 97.6 million, while 24-hour trading volume was approximately USD 64,000.<\/p>\n<p>Zano launched in 2019 as a privacy-focused layer-1 blockchain using a hybrid proof-of-work and proof-of-stake system. Its standard transactions use privacy tools that conceal sender and receiver information, amounts and asset types.<\/p>\n<p>Hard Fork 6 had been presented as a way to make the network easier for exchanges and cross-chain services to integrate. Before the exploit, Zano said Gateway Addresses would provide service operators with directly readable balances while leaving normal wallet behavior unchanged.<\/p>\n<p>The project now says Gateway Addresses will remain subject to a code review before their return. Its forthcoming technical report is expected to cover the exploit\u2019s cause, related Gateway Address code and the criteria required before the feature can safely resume.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p><\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/crypto.news\/zano-restarts-chain-at-block-3833000-after-exploit\/\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Zano has restarted its blockchain from block 3,833,000 after a Gateway Address vulnerability allowed unauthorized ZANO and Freedom Dollar tokens to enter circulation, removing roughly one month of network history. Summary Zano restarted from block 3,833,000, removing roughly one month of transactions after the Gateway exploit. Gateway Address vulnerability allowed unauthorized ZANO and fUSD to [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":22837,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[23],"tags":[],"kronos_expire_date":[],"class_list":["post-23818","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crypto"],"_links":{"self":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts\/23818","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/comments?post=23818"}],"version-history":[{"count":0,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts\/23818\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/media\/22837"}],"wp:attachment":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/media?parent=23818"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/categories?post=23818"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/tags?post=23818"},{"taxonomy":"kronos_expire_date","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/kronos_expire_date?post=23818"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}