An AI audit found the worst kind of bug a zero-knowledge protocol can have. Zcash patched it before anyone knew. “I did a bunch of AI-driven audits of different parts of the Zcash code. Basically, every time a new model comes out, run a standard set of queries across the Zcash codebase.” “Opus 4 comes out from Anthropic, and then finds the worst… what is called, in the parlance of zero-knowledge, a soundness vulnerability.” “It’s a very benign-sounding term for basically the worst possible vulnerability you could have in a zero-knowledge proof protocol, which is you can forge a proof, and therefore you can create money from nothing.” “So it got patched fairly quietly, and then after it was patched, Zooko wrote a blog post… this is what this vulnerability meant and how bad it could have been.” ft. @zmanian, @sudo_ml, @DeFi_Dad & @Nomaticcap