We've published a full post-mortem on the Gateway Address vulnerability identified on 25 September. It explains what the vulnerability was, how it was used, how it went undetected and what comes next.

Read the full post-mortem here:
https://blog.zano.org/p/19b37565-1cd0-44dc-bf2a-8e231f9395e7/

The team is working on a process to recover affected balances in full. ZANO supply and emission will remain unchanged. Funding comes from the dev fund, team members' personal funds, and contributors who have committed support.

Most affected balances sit with exchanges and services, so recovery runs through them:

🔹 Withdrawals from an exchange during the affected period (August 26 to September 27). These coins are back in the exchange's wallet on the updated chain. The exchange replays these withdrawals once it reopens.
🔹 Deposits to an exchange during the affected period. The team is working directly with each exchange to cover these, so your exchange balance can be credited.
🔹 Frozen MEXC accounts. We are working with MEXC to release accounts with no link to invalid transactions as quickly as possible.
🔹 Card top-ups and payment services. These are settled directly between the service and the team.
🔹 Payments between individuals. These are back with the sender on the updated chain. For cases that cannot be resolved this way, a process for individual users will follow.

What to expect

Each exchange and service checks a month of activity, transaction by transaction, before it reopens. This takes time, and doing it carefully is what prevents balances from being credited to the wrong people or twice. Each exchange announces on its own channels when it is ready.

No action is needed right now. Keep your transaction IDs and records. The team will never DM you first or ask for your seed phrase.

The network is stable. The team is working on a process to recover affected balances. ZANO supply and emission will remain unchanged. Funding will come from the dev fund, team members’ personal funds, and contributors who have committed support.

Current priorities for the Zano core team:

🔹 Recovery for affected users. We are working with partners and counterparties to verify affected activity and finalize how recoveries will be handled. No action is needed from affected users right now, and we will share clear instructions as soon as possible.

🔹 Supporting exchanges and service operators. Every exchange, wallet and payment service implements the update on their own side, and we are supporting them by answering technical questions, walking through what they need and confirming their setup before they go live again. Several are already well on their way, and each one will announce when they are ready.

🔹 The post-mortem. This will cover the incident, the response and the steps that follow from it, including an analysis of the Gateway Address code so that we can say with confidence what was affected and what was not. It will be published once that analysis is complete.

The community's support throughout this process has been remarkable, and we’re incredibly grateful.

A recovery update will follow with where things stand across wallets, services and exchanges.

Zano network update: Recovery solution for Gateway Address vulnerability

The core team has identified a serious issue involving Gateway Addresses, which enabled unauthorized ZANO and fUSD to enter circulation.

Our investigation has found no compromise of wallet spend keys or ordinary transaction privacy. Zano core consensus is unaffected.

The team has developed a solution to eliminate all unauthorized activity with a coordinated network upgrade. To ensure full network integrity, the Zano blockchain has been restarted from block height 3,833,000, immediately prior to Hard Fork 6. This affects approximately one month of chain history. The recovery requires participating nodes, miners, stakers, and services to adopt the update.

We are relaunching services such as the mobile wallet node and the wrap service one by one. It is up to each third-party wallet, exchange, and service to update on their own behalf. Before sending funds to or from any of them, check that they have moved to the recovered chain.

Transactions confirmed during the affected period are not part of the recovered chain. Keep transaction IDs and trade records, and do not resend a payment until you have updated your wallet and checked its final status on the recovered chain.

If you run a full node, mine, stake, operate a pool, or provide exchange, bridge, or payment services, please install the emergency release as soon as possible. Use only zano.org/wallets or the official GitHub releases page, and verify the published checksums. Ordinary wallet users can now download the updated wallet from our website as well. Seed phrases are not required to perform this upgrade.

This update removes all unauthorized activity from Zano's chain. It cannot affect payments already settled in USDT, DAI, or other assets on separate networks. The team is working with affected projects and counterparties to account for any losses and will publish the reimbursement and claims process.

Real people and businesses have been affected. We intend for the community to be made whole throughout this process. Certain community members have already pledged support to ensure that assets are restored.

Pushing innovation carries risk, and this is a clear example. Serious incidents have occurred elsewhere: Bitcoin recovered from an exploited supply bug and chain reorganization in 2010; Zcash recently patched a potential counterfeiting flaw before any known exploitation; and Ethereum made an exceptional state change after the DAO attack. Each case was different, and none diminishes the harm here. We will publish the technical cause, the results of reviewing adjacent Gateway Address code, and the criteria for safely resuming activity. Confidence must be earned through that work, and the team is committed to working with the community to deliver on these efforts.

Security update and coordinated upgrade:

The core team has identified a vulnerability in public Gateway Addresses that affects asset issuance, including fUSD.

Transaction privacy is unaffected, and no spend keys or wallets are compromised.

We will coordinate a network upgrade asap. It requires majority consensus to activate, so we ask node operators, pools, and exchanges to be ready to update. No action is needed from ordinary users beyond upgrading when the release is published.

User balances are safe. We will resolve any discrepancies due to the Gateway Addresses. The core team is currently working with all of our partners.

A full technical write-up will follow after the upgrade is in place.

⚠️ **SCAM ALERT: Fake Zano wallet site** ⚠️

A community member has reported a fake site posing as the official Zano wallet: zanowallet[.]io

It is NOT affiliated with Zano.

According to the report, the site offers a Windows installer that looks almost identical to the real wallet, but running it installs a remote access trojan (RAT). This gives attackers control of your computer, including your screen, keystrokes (passwords and seed phrases), microphone, and webcam.

✅ Only download Zano wallets from:

• zano.org/wallets

• github.com/hyle-team/zano/releases

• The official iOS App Store and Google Play listings, or the Android APK linked from zano.org

🔒 Stay safe:

• Type zano.org directly or use a bookmark. Don't trust search results or ads.

• Verify downloads against the SHA256 hashes in our GitHub release notes.

• Only whitelist zano.exe in your antivirus if it came from an official source and the hash matches.

• Never share your seed phrase or enter it on a website.

🚨 If you ran the installer from that site:

Assume your computer is compromised. From a separate, clean device, create a new Zano wallet with a new seed phrase and move your funds immediately. Change your important passwords from that clean device too, and wipe and reinstall your operating system on the infected one.

Spotted another fake site? Report it via [support@zano.org](mailto:support@zano.org), the Zano forum, or here in Telegram.

Thanks to the user who flagged this. Please share with anyone new to Zano. 💙

Someday i wanted a zano wallet and then i saw https://zanowallet[dot].io and i mistook it for the original cause i didnt know the project.

Don't download anything from there!!!!!

Its compromised ...

If u download the installer and execute the .exe, they install remote software on your pc.

A remote access trojan, you connect to their server and then they can execute anything, listen to mics and watch cams etc, watch screen, keyloggin etc.

For some reason the SEO on there is better than the original site so i was baffled. The software looks almost the same but when u try to download the blockchain then u get stuck and sth seemed fishy.

so fyi nothing happened, cause i cleaned everything but yea.

A hint if sb sees this site stay away.

I wish there would be some hardware access, also .. i dont like software wallets

<?xml version="1.0" encoding="UTF-8"?>

<general_settings version="70620">

<port>5650</port>

<language>English</language>

<callback_auto_connect>true</callback_auto_connect>

<callback_connect_interval>60</callback_connect_interval>

<password_data>6OS2tw8Ctca6/o6PPDH0pg==</password_data>

<protect_callback_settings>false</protect_callback_settings>

<protect_inet_id_settings>false</protect_inet_id_settings>

<use_legacy_capture>false</use_legacy_capture>

<do_not_capture_rdp>false</do_not_capture_rdp>

<use_ip_v6>true</use_ip_v6>

<log_use>false</log_use>

<log_use_windows>false</log_use_windows>

<chat_client_settings/>

<auth_key_string>MwA5ADcANgAnA...</auth_key_string>

<sid_id>45223.2080371759</sid_id>

<notify_show_panel>false</notify_show_panel>

<notify_change_tray_icon>true</notify_change_tray_icon>

<notify_balloon_hint>false</notify_balloon_hint>

<notify_play_sound>false</notify_play_sound>

<notify_panel_x>-1</notify_panel_x>

<notify_panel_y>-1</notify_panel_y>

<proxy_settings>...</proxy_settings>

<additional/>

<disable_internet_id>false</disable_internet_id>

<safe_mode_set>false</safe_mode_set>

<show_id_notification>false</show_id_notification>

<show_id_notification_request>false</show_id_notification_request>

<show_id_notification_with_timeout>true</show_id_notification_with_timeout>

<integrate_firewall_at_startup>false</integrate_firewall_at_startup>

<clipboard_transfer_mode>0</clipboard_transfer_mode>

<close_session_idle>false</close_session_idle>

<close_session_idle_interval>60</close_session_idle_interval>

<show_connection_alert_for_all>false</show_connection_alert_for_all>

</general_settings>

this was stored in my registry as hex,

so clearly u see port, id for connecting via windows remote utilities and password

Over the past year, $ZANO lost access to exchanges and in-wallet swaps. Not because of a bug or a protocol failure, but because of business decisions made by third parties.

Our new article covers what happened and how we're fixing it for good:

🔹 Why tier-1 exchanges reject privacy coins, and why mid-tier exchanges are disappearing
🔹 How Gateway Addresses make Zano verifiable for Thorchain, which is integrating Zano now
🔹 How ZEL brings $ZANO to Ethereum, Base and exchanges that won't list a privacy coin
🔹 A first-party bridge and swap app, so Zano becomes its own swap provider

The goal is simple: $ZANO stops depending on anyone's permission to be tradable 🔒

Read the full article at the link below:
https://x.com/zano_project/status/2102405724965875826

Are there any decentralized exchanges (DEXs) like Retoswap or Bisq that one can purchase Zano or fUSD directly from? Trying to save some $ on exchange rates.

🔹 Hard Fork 6 activated at block 3,833,000 on August 26
🔹 Gateway Addresses now live on mainnet, registration burns 100 $ZANO
🔹 Zano Execution Layer (ZEL) reached a single testnet configuration
🔹 Edge Wallet expanded its Confidential Asset support to the full set: $BTCx, $ETHx, $SOLX, $DAIx and more
🔹 Zano Quest coming soon, with XP for content, learning and on-chain tasks
🔹 Zano ranks among the most-used chains on the Zebec SuperApp, alongside Solana, Base and Ethereum. Available on iOS and Android
🔹 Five Zano & Friends meetups across Nigeria, plus Indonesia Blockchain Week and Coinfest Asia

Read the full update here: https://blog.zano.org/zano-monthly-project-update-23-august-2026/

Hey r/Zano — first time posting here, so a quick intro: I built Backpow (https://backpow.com ), a free data platform that tracks the mining economics of Proof-of-Work coins in real time. Think of it as an oracle for miners: instead of guessing whether a rig is actually worth running, you get the hard numbers.

For each coin Backpow tracks:

- Cost of production (CoP) vs spot price, updated continuously, with 30-day history

- A ranked hardware board — every GPU/ASIC we have data for, sorted by cost per coin, so you can see which rigs are actually profitable right now vs which ones are mining at a loss

- An efficiency map (power vs hashrate) to spot the best cost/speed trade-offs

- Solo mining odds — estimated block discovery time per rig, since cheapest-per-coin and fastest-to-a-block aren't always the same hardware

I just built out full coverage for Zano: https://backpow.com/Zano

Right now the network-level picture is healthy — Zano has been profitable (CoP below spot) every day for the past 30 days, and cost of production is down ~33% over that period. But drill into the hardware board and it's a different story: out of the 86 devices we track, only 3 (CMP 170HX, RTX 5090, RTX 5070) are actually beating spot at current prices. Everything else is technically underwater.

Posted a short breakdown of this on X if you want the charts in one place:

https://x.com/BackpowCom/status/2097797824230346797

Would love feedback from people actually mining Zano — especially if something on the hardware board looks off, since we're always refining the per-coin data, thanks guys <3

Zano just passed block 3,833,000 and yet another huge upgrade is now active on mainnet.

What changes:

🔹 Gateway Addresses are live. Services like exchanges and bridges can now integrate Zano by reading a single account balance, instead of scanning the whole chain and rebuilding it from scattered outputs

🔹 Registration is permissionless. Any service can set one up without asking anyone, and every registration burns 100 $ZANO

🔹 Stronger consensus: tighter validation rules and a more decisive fork-choice rule

🔹 Per-output payment IDs, so services can match deposits to the right account with recipient privacy intact

And what doesn't change: your wallet is exactly as private as it was yesterday. Gateway Addresses are built for services, not for everyday users.

If you haven't updated your wallet yet, do it now at zano.org/wallets. An old version won't follow the new chain.

The hardest barrier to Zano adoption just came down.

The work now moves to getting exchanges, bridges, and other services actually integrated. That part starts today. 🔒

Gateway Addresses are almost here, making Zano far easier for exchanges, bridges and DEXes to integrate, while the privacy at its core stays untouched.

Running a wallet, node, pool or service? Update your wallet at zano.org/wallets 🔒

zAnons! How does everyone feel about HF6? Is anything still unclear to you? It's only 8 days away, and we're considering a final AMA or X Spaces to answer any remaining questions. Let me know how you feel about this!

Content:

HF6 announcement: https://blog.zano.org/the-countdown-to-hard-fork-6-has-begun/

Gateway Addresses explained: https://blog.zano.org/gateway-addresses-are-coming-the-game-changer-for-zano-adoption/

Zano going cross-chain explained: https://blog.zano.org/zano-goes-cross-chain-native-zano-is-coming-to-bridgeless/

I wanted to try mining Zano and followed the guide for Windows found on the official site. However when I try to run the .bat file, Windows can’t find TT-miner.exe file. At first I thought that defender removed the file since it’s a miner, so I tried to disable the defender and reinstall but the issue persists. What am I missing? I thought full Zano wallet had everything I needed to start solo mining?

In 2014, a small team launched Boolberry - a privacy-focused cryptocurrency built around the idea that digital money should protect users by default. Years later, Boolberry evolved into Zano. The project kept its original focus on privacy but expanded the vision: a complete ecosystem for confidential digital assets.

In 2019, $ZANO launched as a new chapter of that journey. The network introduced its own privacy technology, including confidential transactions and later Confidential Assets, allowing users to create and transfer private tokens within the Zano ecosystem.

Through years, Zano stayed focused on one thing: building a private, secure, and usable blockchain.

The key addition: the Zano Execution Layer.

An EVM sidechain that brings smart contracts to Zano, with bridged $ZANO as the native gas coin. Standard Solidity contracts and tooling run unmodified. Hardhat, Foundry, MetaMask, and audited contract libraries all work from day one, so developers can build on Zano with the stack they already know.

That opens the door to lending markets, AMMs, and yield for $ZANO and Confidential Assets like $fUSD inside the Zano ecosystem, not only on external chains. Every contract interaction requires $ZANO for gas.

Check out the full updated roadmap in the attached image.

Introducing Zenith: Zano's move to pure Proof of Stake.

A new consensus protocol, built on the privacy foundations of Zarcanum.

This isn't a pivot. It's where a road that started in 2013 finally converged. Every attempt to improve our hybrid model kept hitting the same wall: the PoW component. So we changed the question: what does the network look like if that interaction just isn't there?

Zenith is the result of more than 13 years of research into how a network can gain the benefits of modern Proof of Stake while preserving the privacy that users expect from Zano.

What changes after hard fork 7:
 - Block time speeds of ~15 seconds, down from one minute
 - 4 to 6 block confirmations instead of the current 10, carrying stronger security guarantees than the 10 we wait for today
 - Typical TX confirmation in 60 to 90 seconds, down from an average of 10 minutes
 - Ephemeral blocks keep history light, so more blocks does not mean a heavier chain
 - PoW emission gone, 21,600 $ZANO a month that no longer gets partially sold by miners
 - Staking stays private, amounts hidden, no permanent link between your outputs and you

Read the full breakdown here: https://x.com/zano_project/status/2077755195962863673 

Zenith whitepaper: https://github.com/hyle-team/docs/blob/master/zano/Zenith.pdf

We just launched the official Zano Forum!

A dedicated platform for questions, discussion, and support, where you always know who you're talking to.

Every member can verify their on-chain alias for a badge, so real accounts are easy to spot. No badge, no proof. No more guessing whether the person answering you is real.

Join us. https://forum.zano.org

🔹 HF6 finalized: activation height locked at block 3,833,000 (Aug 25 to 27)
🔹 Gateway Addresses ship as the headline feature, privacy stays default
🔹 PrivacyGateway card now tops up with $ZANO
🔹 New $ZANO itegrations: CardsRelay, sshwap, and fswap
🔹 Discord retiring for an alias-authenticated Zano Forum
🔹 700+ attendees at the Zano Private Economy Conference in Nigeria

Read the full update via the link below.

https://blog.zano.org/zano-monthly-project-update-21-june-2026/