AnomaPay Halts Validators Due to RISC Zero Vulnerability; Funds Secure

The cross-chain financial protocol AnomaPay has officially announced the suspension of its network validators following the discovery of a critical security flaw. The vulnerability was identified within the RISC Zero proof system, a zero-knowledge (ZK) infrastructure utilized by the platform to verify transactions. To mitigate the risk of potential exploitation and ensure the integrity of user assets, the development team has initiated an emergency pause on the risc0 validator, rendering funds temporarily inaccessible to users during the maintenance period.

Technical Vulnerability and Protocol Response

The security breach originated in an external component rather than the AnomaPay core code itself. The RISC Zero team is currently working on a comprehensive patch to address the underlying weakness in their proof generation system. According to the project's disclosure on the X platform, the decision to halt operations was a proactive measure to prevent unauthorized withdrawals or double-spending attacks.

• The risc0 validator has been taken offline to prevent interactions with the vulnerable proof system.
• The RISC Zero team is developing a security upgrade to harden the ZK-proof infrastructure.
• AnomaPay will undergo a mandatory transition to Protocol Version V2 to integrate these fixes.

Timeline for Restoration and Fund Safety

AnomaPay has reassured its community that all user deposits remain secure and are accounted for on the blockchain ledger. However, the migration process and the implementation of the new security standards are expected to take approximately two weeks. During this window, liquidity will remain locked within the smart contracts to prevent any compromise of the ecosystem.

User deposits are secure but temporarily inaccessible until the Anoma protocol is upgraded to version V2, which will include the new security update from RISC Zero. Although this downtime is not ideal, it is necessary to protect user funds.

The transition to Anoma V2 will be handled internally by the protocol's developers. Users are not required to perform any manual migrations or share private keys, as the balances will be automatically mapped to the upgraded network once the validators are reactivated.

In conclusion, while the temporary suspension of AnomaPay services highlights the complexities of zero-knowledge proof implementations, the swift coordination between AnomaPay and RISC Zero aims to prioritize asset preservation over uptime. Investors and participants are advised to monitor official channels for the specific reactivation date, which is currently slated for late November 2026.