,
4 tweets,
2 min read
Read on Twitter
When I disclosed CVE-2019-7167 to John Dobbertin, he told me: “People will have three questions: 1. Is my money safe? 2. Why did it take you so long to tell us? 3. How do we know that it won’t happen again?” Here are the answers in three tweets.
1. “Is my money safe?” We have seen no evidence that the issue was exploited before it was fixed. However, even if it was—or in case of any other such problem—this will not inflate the monetary base because of turnstiling (z.cash/blog/defense-a…). 
2. “Why did it take you so long to tell us?” We were protecting both Zcash users and the users of other coins. This wasn’t complete until a few days ago: blog.zencash.com/shielded-trans…
3. “How do we know that it won’t happen again?” We can’t promise perfection—no one can make that guarantee. We can say that thanks to the Zcash Dev Fund ( < 10% of the current block reward), you have a world-class team dedicated to protecting and improving the technology. ៚
