A Guy's Discovery of a Billion-Dollar Bug Using Claude Code

crypthub

6/10/2026, 7:20:53 AM

The Zcash Vulnerability and Market Impact

A bug was discovered in Zcash’s Orchard circuit by security researcher Taylor Hornby. This flaw compromised the shielded pool designed for private Zcash transactions. The vulnerability was severe enough to trigger an emergency response across the entire crypto ecosystem. The discovery led to a massive sell-off, erasing over $4 billion in market capitalization.

The Nature of the Exploit

The core issue was a missing constraint within the Orchard circuit design. This allowed an attacker to double-spend the same shielded note multiple times. Specifically, a malicious prover could inflate ZEC within the Orchard pool without leaving an on-chain trail. Crucially, this vulnerability had existed since Orchard went live in May 2022.

AI-Assisted Discovery Method

Hornby used a custom "zcash-full-stack-auditor" framework powered by Claude Opus 4.8 AI. The AI framework scanned the halo2 implementation, searching for soundness and zero-knowledge security issues. Claude helped generate proof-of-concept code, significantly accelerating the investigation process. This case demonstrates AI’s growing ability to investigate highly complex technical systems.