Zano Blockchain Restarts After Gateway Address Exploit

The Zano blockchain has been restarted at block height 1,174,000, a point in time immediately preceding the activation of Hard Fork 6. This rollback was necessitated by a significant security exploit targeting the newly implemented Gateway Addresses feature, which was introduced with Hard Fork 6. The exploit allowed unauthorized access and potential manipulation of funds within the Zano ecosystem. The Zano development team confirmed the restart and rollback in a statement released on March 25, 2024, detailing the immediate actions taken to secure the network. The decision to revert the blockchain to an earlier state was made to prevent further exploitation and to allow for a thorough investigation and remediation of the vulnerability. The Gateway Address feature, designed to enhance interoperability and user experience by providing a standardized way to interact with external services and other blockchains, was identified as the vector for the attack. Specific details regarding the nature of the exploit and the extent of any potential fund loss have not been fully disclosed, but the company emphasized that the rollback was the most effective measure to safeguard user assets. The Zano team is currently working on a patch to address the identified security flaw in the Gateway Address implementation. They have also initiated a comprehensive audit of the codebase related to this feature. The network's restart at block height 1,174,000 effectively undoes all transactions and network states that occurred since Hard Fork 6 was activated. This includes the introduction of Gateway Addresses and any subsequent operations that may have been compromised. The Zano team has committed to providing regular updates to the community regarding the progress of the security patch development and the re-deployment of the updated Hard Fork 6 features. The incident highlights the ongoing challenges in securing complex blockchain protocols, particularly when introducing new functionalities that interact with external systems. The Zano project, which aims to provide a decentralized platform for various applications and services, is now focused on restoring full functionality and trust within its user base. The timeline for the reintroduction of Gateway Addresses will be determined by the successful implementation and rigorous testing of the security fixes. The Zano team is prioritizing the integrity of the network and the security of its users' assets above all else. Further technical details about the exploit and the remediation plan are expected to be released in subsequent communications.