Zano restarts chain before Hard Fork 6 after Gateway Address exploit

Zano restarts chain before Hard Fork 6 after Gateway Address exploit

N
News Editor
2026-09-28 01:09:22
Zano has rolled its blockchain back by roughly one month after a vulnerability tied to Gateway Addresses allowed unauthorized ZANO and Freedom Dollar (fUSD) to enter circulation, according to the project’s core team. The network was restarted at block 3,833,000, the height immediately before Hard Fork 6 introduced the affected feature. The recovery requires nodes, miners, stakers, exchanges and other service providers to adopt the update. The rollback removes the unauthorized tokens, but it also wipes out legitimate transactions made during that period, meaning they will not appear on the recovered chain. Zano said the move cannot reverse payments that were already settled on other blockchains. The team added that it is working to account for losses and plans to publish a reimbursement and claims process. Zano has not yet released a post-mortem, though it said the issue came from Gateway Addresses, a feature designed to help bridges, exchanges and payment services manage funds through a single account-style balance. Marketing and growth head Quinten van Welzen said leaving the exploit untouched would have allowed unlimited unauthorized supply to remain in circulation.

Zano has restarted its blockchain at block 3,833,000, the height immediately before Hard Fork 6, after a Gateway Address vulnerability allowed unauthorized ZANO and Freedom Dollar (fUSD) to enter circulation, according to the project’s core team.

The team said on Sunday that the recovery requires participating nodes, miners, stakers, exchanges and other services to adopt the update. The rollback reaches back roughly one month in chain history.

Rollback removes unauthorized tokens and valid transactions

The chain reset invalidates legitimate transactions made during that period along with the unauthorized tokens. As a result, transactions recorded during the affected month will no longer appear on the recovered chain.

Zano also said the rollback cannot reverse payments that have already been settled on other blockchains. The team said it is working to account for any losses and will publish a reimbursement and claims process.

Quinten van Welzen, Zano’s head of marketing and growth, said: “Doing nothing meant unauthorized ZANO and fUSD in circulation without limit, diluting every holder and breaking the most basic promise a currency makes: a fixed supply.”

He added: “It would also tell every future attacker that exploited coins get to keep their value. No project survives that.”

Zano says the issue came from Gateway Addresses

Zano had not released a post-mortem at the time of publication, but it confirmed that the issue came from Gateway Addresses. The feature was built to make it easier for bridges, exchanges and payment services to integrate with Zano by letting them manage funds through a single account-style balance, similar to designs used on other blockchains.

Before Gateway Addresses, ordinary Zano wallets tracked funds as separate transaction outputs, or UTXOs, rather than as one account balance. Exchanges and other services had to scan the blockchain to identify incoming payments, track those outputs and choose which ones to spend when processing withdrawals.

Zano’s blockchain explorer showed the rollback taking place on Sunday.

Network background and token details

Zano launched in May 2019 as a layer-1 blockchain focused on private payments. Its standard private transactions conceal senders, receivers, transferred amounts and asset types.

Alongside its native token ZANO, the network also allows users to deploy and mint custom digital assets. Freedom Dollar, or fUSD, is one such token operating on the Zano blockchain.

Van Welzen said: “Restarting the chain from before Hard Fork 6 costs a month of history, and it costs trust, which we’ll have to earn back.”

He also said: “But it restores the supply everyone signed up for, and it leaves a path to rebuild. Which is better than 7 years of hard work left to die. We know it hurts. But not doing it would have hurt more.”

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
100

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.