AnomaPay said it has paused the risc0 verifier behind the Anoma protocol after an external security vulnerability was found in the RISC Zero proof system it relies on. In a post on X, the project said the flaw could endanger user funds. The disclosure was relayed on November 11 by Chinese-language outlet PANews.
According to AnomaPay, the verifier will be upgraded by the RISC Zero team. The project described the suspension as a measure to protect users and keep funds secure.
What users can expect
AnomaPay said funds already deposited are safe but temporarily cannot be accessed. Access is expected to return once the Anoma protocol is upgraded to V2, a version that includes a new security update from RISC Zero. The project estimates the upgrade will take about two weeks.
The project also said users do not need to take any action. According to AnomaPay, funds will be migrated automatically to V2 and access restored once the upgrade is complete. The statement, as relayed by PANews, acknowledged that the downtime is not ideal but called it necessary to protect user funds.
What remains unknown
Several key details have not been made public in the material available. The technical nature and severity of the RISC Zero vulnerability are not described, and it is unclear whether it was exploited or whether any funds were lost. It is also not known who discovered the flaw and when, or how much value is locked or affected.
It likewise remains unclear whether other projects that use RISC Zero are affected, and no statement from the RISC Zero team was included in the report. The assurance that deposited funds are safe comes from AnomaPay itself and has not been independently verified.
Sources
- panewslab.com PANews — AnomaPay：因RISC Zero证明系统漏洞暂停验证器，资金暂不可访问 Accessed
Comments