{ "version": 1, "event_id": "evt_9442440e58c62af0", "url": "https://xiyu.news/events/evt_9442440e58c62af0/", "json": "https://xiyu.news/api/events/evt_9442440e58c62af0.json", "type": "security_incident", "status": "closed", "category": "crypto", "title": { "zh": "Zano 在 Gateway Address 漏洞利用后回滚区块链一个月", "en": "Zano rolls blockchain back a month after Gateway Address exploit" }, "current_state": { "zh": "Zano 已确认 Gateway Address 漏洞被利用铸造 3690 万枚未授权 ZANO 及 fUSD，并已回滚约一个月链上历史；恢复工作将主要通过交易所和支付服务执行，交易所将回放被回滚撤销的提款，团队将贷记受影响的存款。", "en": "Zano has confirmed the Gateway Address exploit minted 36.9M unauthorized ZANO plus fUSD and has rolled back about a month of chain history; recovery is now being carried out primarily through exchanges and payment services, with exchanges to replay withdrawals reversed by the rollback and the team crediting affected deposits." }, "first_seen_at": "2026-09-28T01:56:50.752531+00:00", "last_updated_at": "2026-10-02T06:41:10.670498+00:00", "last_material_change_at": "2026-10-02T06:41:10.670498+00:00", "confidence": 0.75, "updates_count": 3, "sources_count": 3, "entities": [ "address", "blockchain-rollback", "gateway", "zano" ], "identifiers": [], "topics": [ "blockchain-rollback", "hard-fork", "privacy-coin", "protocol-incident", "protocol-security", "recovery-funds", "rollback", "zano" ], "updates": [ { "update_id": "upd_3f15636ed78cebaa", "event_id": "evt_9442440e58c62af0", "occurred_at": "2026-09-28T01:09:22Z", "published_at": "2026-09-28T01:09:22Z", "first_seen_at": "2026-09-28T01:56:50.752531Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "Zano 在 Gateway Address 漏洞利用后回滚区块链一个月", "title_en": "Zano rolls blockchain back a month after Gateway Address exploit", "what_changed_zh": "在 Gateway Address 漏洞利用导致未经授权的 ZANO 和 Freedom Dollar 进入流通后，Zano 在区块 3,833,000 处重启区块链——就在硬分叉 6 之前——回滚了约一个月的历史记录，并使该期间内的合法交易失效。", "what_changed_en": "Following a Gateway Address exploit that let unauthorized ZANO and Freedom Dollar enter circulation, Zano restarted its blockchain at block 3,833,000 — just before Hard Fork 6 — rolling back about a month of history and invalidating legitimate transactions from that period.", "current_state_zh": "在 Gateway Address 漏洞利用导致未经授权的 ZANO 和 Freedom Dollar 进入流通后，Zano 在区块 3,833,000 处重启区块链——就在硬分叉 6 之前——回滚了约一个月的历史记录，并使该期间内的合法交易失效。", "current_state_en": "Following a Gateway Address exploit that let unauthorized ZANO and Freedom Dollar enter circulation, Zano restarted its blockchain at block 3,833,000 — just before Hard Fork 6 — rolling back about a month of history and invalidating legitimate transactions from that period.", "detailed_summary_zh": "Following a Gateway Address exploit that let unauthorized ZANO and Freedom Dollar enter circulation, Zano restarted its blockchain at block 3,833,000 — just before Hard Fork 6 — rolling back about a month of history and invalidating legitimate transactions from that period.", "detailed_summary_en": "Following a Gateway Address exploit that let unauthorized ZANO and Freedom Dollar enter circulation, Zano restarted its blockchain at block 3,833,000 — just before Hard Fork 6 — rolling back about a month of history and invalidating legitimate transactions from that period.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.75, "story_ids": [ "rss:cointelegraph.com_rss:f275999c6c5398f7" ], "sources": [ { "url": "https://cointelegraph.com/news/zano-rolls-blockchain-back-a-month-after-gateway-address-exploit?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound", "label": "Cointelegraph", "source_type": "rss", "official": false } ] }, { "update_id": "upd_529e84c11a2ab36d", "event_id": "evt_9442440e58c62af0", "occurred_at": "2026-09-29T13:20:02Z", "published_at": "2026-09-29T13:20:02Z", "first_seen_at": "2026-09-29T18:12:13.615499Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "Zano 回滚一个月的交易，团队计划用个人资金进行恢复", "title_en": "Zano rolls back a month of transactions as team plans to use personal funds for recovery", "what_changed_zh": "Zano 团队宣布将动用开发者基金、团队成员个人资金和承诺贡献者的资金来支持回滚受影响用户的恢复，但尚未公布资格规则、赔付金额或时间表；同时表示网络已稳定、ZANO 供应量和排放量不变、钱包花费密钥和普通交易隐私未受损害，完整事后分析待发布。", "what_changed_en": "Zano's team announced it will draw on the developer fund, team members' personal funds, and committed contributors to finance recovery for users affected by the rollback, but eligibility rules, payment amounts, and a timetable are not yet published; it also said the network is stable, ZANO supply and emission remain unchanged, wallet spend keys and ordinary transaction privacy were not compromised, and a full post-mortem is pending.", "current_state_zh": "在 Gateway Address 漏洞导致未授权 ZANO 和 Freedom Dollar 进入流通后，Zano 已在区块 3,833,000 重启链并回滚约一个月的交易；团队已承诺通过开发者基金、个人资金和贡献者资金进行恢复，但索赔流程和赔付规则尚未上线。", "current_state_en": "After the Gateway Address exploit allowed unauthorized ZANO and Freedom Dollar into circulation, Zano restarted its chain at block 3,833,000, rolling back about a month of transactions; the team has promised recovery funding through the developer fund, personal funds, and contributors, but the claims process and payment rules are not yet live.", "detailed_summary_zh": "Zano executed an emergency rollback that removed about a month of previously confirmed transactions from its chain, with the team promising to finance user recovery through the developer fund, team members' personal funds, and committed contributors while leaving eligibility rules and a payment schedule unpublished.", "detailed_summary_en": "Zano executed an emergency rollback that removed about a month of previously confirmed transactions from its chain, with the team promising to finance user recovery through the developer fund, team members' personal funds, and committed contributors while leaving eligibility rules and a payment schedule unpublished.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.0, "references": [], "confidence": 0.96, "story_ids": [ "rss:cryptoslate.com_feed_:50f2e0fc4956464b" ], "sources": [ { "url": "https://cryptoslate.com/zano-rollback-removes-month-of-transactions-personal-funds-recovery/", "label": "CryptoSlate", "source_type": "rss", "official": false } ] }, { "update_id": "upd_875ba78f1fab8884", "event_id": "evt_9442440e58c62af0", "occurred_at": "2026-10-02T05:02:23Z", "published_at": "2026-10-02T05:02:23Z", "first_seen_at": "2026-10-02T06:41:10.670498Z", "time_precision": "published", "update_type": "aftermath", "material_change": true, "title_zh": "Zano 攻击者在区块链回滚前创建了 3690 万枚未授权 ZANO", "title_en": "Zano exploiter created 36.9M unauthorized ZANO before blockchain rollback", "what_changed_zh": "Zano 发布事后分析，披露攻击者通过 Gateway Address 漏洞在 8 月 29 日和 9 月 25 日分别铸造约 1840 万枚 ZANO，共 3690 万枚未授权 ZANO 及 fUSD；攻击者支付 100 ZANO 注册费并先行测试伪造资产，首次铸造近一个月未被发现。恢复将主要通过交易所和支付服务进行，交易所将回放被回滚撤销的提款，团队将贷记受影响的存款。", "what_changed_en": "Zano's post-mortem revealed the attacker exploited the Gateway Address vulnerability to mint about 18.4M ZANO on Aug. 29 and another 18.4M on Sept. 25, totaling 36.9M unauthorized ZANO plus fUSD; the attacker paid a 100 ZANO registration fee, tested a fabricated asset first, and the first mint went unnoticed for nearly a month. Recovery will primarily run through exchanges and payment services, with exchanges to replay withdrawals reversed by the rollback and the team crediting affected deposits.", "current_state_zh": "Zano 已确认 Gateway Address 漏洞被利用铸造 3690 万枚未授权 ZANO 及 fUSD，并已回滚约一个月链上历史；恢复工作将主要通过交易所和支付服务执行，交易所将回放被回滚撤销的提款，团队将贷记受影响的存款。", "current_state_en": "Zano has confirmed the Gateway Address exploit minted 36.9M unauthorized ZANO plus fUSD and has rolled back about a month of chain history; recovery is now being carried out primarily through exchanges and payment services, with exchanges to replay withdrawals reversed by the rollback and the team crediting affected deposits.", "detailed_summary_zh": "Zano's post-mortem revealed an attacker exploited its Gateway Address vulnerability to mint 36.9 million unauthorized ZANO and fUSD tokens, which were indistinguishable from legitimate coins and ultimately forced the team to roll the blockchain back by a month.", "detailed_summary_en": "Zano's post-mortem revealed an attacker exploited its Gateway Address vulnerability to mint 36.9 million unauthorized ZANO and fUSD tokens, which were indistinguishable from legitimate coins and ultimately forced the team to roll the blockchain back by a month.", "background_zh": "Zano 是一条以隐私为核心的加密货币，fUSD（Freedom Dollar）是在 Zano 上发行的去中心化、锚定美元的稳定币，其官方说明称该协议没有管理员密钥或黑名单功能。据相关事件报道，该网络从区块 3,833,000 重新启动，删除了约 30 天的链上数据，并推送了热修复，团队称更新后的链运行稳定。Zano 周三表示，正使用开发者基金、团队成员个人资金以及已承诺的捐款来恢复受影响的余额，主要通过与交易所和支付服务商的协作进行：交易所将重放被回滚撤销的提现，团队则为受影响的充值记账。", "background_en": "Zano is a privacy-focused cryptocurrency, and fUSD (Freedom Dollar) is a decentralized, dollar-pegged stablecoin issued on Zano that its documentation describes as having no admin keys or blacklist function. According to reports on the incident, the network was restarted from block 3,833,000, removing roughly 30 days of blockchain data, and a hotfix was pushed with the team saying the network is stable on the updated chain. Zano said Wednesday it is working to restore affected balances using its developer fund, team members' personal funds and committed contributions, primarily through exchanges and payment services, with exchanges replaying withdrawals reversed by the rollback and the team crediting affected deposits.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "此次漏洞直接冲击 ZANO 与 fUSD 的供应完整性，风险传导路径主要经由已上线或托管这些代币的交易所与支付服务商——它们需要重新对账被回滚撤销的提现与充值——以及持有 fUSD、其余额取决于重启后链上状态的用户。由于 Zano 属于较小市值网络，影响主要集中在该生态的流动性以及市场对隐私币和稳定币协议安全的情绪，而非更广泛的市场结构。", "market_impact_en": "The exploit directly hits the supply integrity of ZANO and fUSD, so exposure runs through exchanges and payment services that listed or custody the tokens and must now reconcile withdrawals and deposits reversed by the rollback, plus fUSD holders whose balances depend on the restarted chain state. Because Zano is a smaller-cap network, the transmission is concentrated in that ecosystem's liquidity and in sentiment toward privacy-coin and stablecoin protocol security rather than broader market structure.", "importance_score": 8.0, "references": [ { "url": "https://financefeeds.com/zano-attacker-minted-36-9-million-zano-and-1-8-quadrillion-fusd/", "title": "Zano Attacker Minted 36.9 Million ZANO and... - FinanceFeeds" }, { "url": "https://coindesk.cc/story/2026/09/zano-zano-network-rewinds-30-days-following-gateway-address-security-flaw", "title": "Zano rolls back 30 days after Gateway Address flaw" }, { "url": "https://www.freedomdollar.com/", "title": "Freedom Dollar (fUSD) - Private, Censorship-Resistant Stablecoin on..." } ], "confidence": 0.97, "story_ids": [ "rss:cointelegraph.com_rss:928fd26ba44b66c9" ], "sources": [ { "url": "https://cointelegraph.com/news/zano-exploiter-created-369m-unauthorized-zano-before-blockchain-rollback?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound", "label": "Cointelegraph", "source_type": "rss", "official": false } ] } ] }