Zcash × Brave WalletPersonal project

Type to search. Use ↑ ↓ and Enter to open a result.

fix: validate ZCash note versions against their shielded pools

Closed as not planned Bug Security & hardening Security

Lead item brave-browser#58287 · opened by iAnonymous3000 · last source update

Issue state

Closed (not planned)

Closed .

Implementation

No pull request is linked by closing keywords, GitHub’s closing references, a brave_<issue> branch name or the issue timeline.

Release notes

No platform changelog lists this item.

Validation

QA required (QA/Yes).

No QA pass labels.

QA labels are Brave’s own validation records per OS. They are not independent verification by this tracker.

Target

No milestone set.

Platforms (OS labels): Desktop

Owner: unassigned

Build presence

Whether a merged pull request in this group is an ancestor of the brave-core tag of each platform’s current build (from versions.brave.com). Code presence is not the same as a feature being exposed on that platform.

PlatformReleaseBetaNightly
DesktopUnknown 1.97.59no merged PR is linked, so presence in this build is unknownUnknown 1.98.47no merged PR is linked, so presence in this build is unknownUnknown 1.100.5no merged PR is linked, so presence in this build is unknown
AndroidUnknown 1.97.57no merged PR is linked, so presence in this build is unknownUnknown 1.98.52no merged PR is linked, so presence in this build is unknownUnknown 1.100.5no merged PR is linked, so presence in this build is unknown
iOSUnknown 1.96.62no merged PR is linked, so presence in this build is unknownUnknown 1.99.44no merged PR is linked, so presence in this build is unknownUnknown 1.100.7no merged PR is linked, so presence in this build is unknown

Members and their history

Issue

brave-browser#58287 fix: validate ZCash note versions against their shielded pools

State: closed (not planned) · created · closed · updated · discovered via label:feature/web3/wallet/zcash, search:ironwood, search:zcash · matched label:feature/web3/wallet/zcash, title:zcash, title:shielded, body:ironwood

bug security priority/P4 QA/Yes release-notes/exclude feature/web3/wallet OS/Desktop feature/web3/wallet/core feature/web3/wallet/zcash

Stored shielded notes are returned without checking that their version matches the requested pool. Reject mismatches before Ironwood spending is enabled. Tracks #56872.

Timeline (5 of 10 events)
  1. 2026-08-19 20:02 Label added priority/P4 by iAnonymous3000
  2. 2026-08-19 20:02 Label added QA/Yes by iAnonymous3000
  3. 2026-08-19 20:02 Label added release-notes/exclude by iAnonymous3000
  4. 2026-08-19 20:02 Label added OS/Desktop by iAnonymous3000
  5. 2026-08-21 00:40 Closed not_planned by kdenhartog

Recorded changes

  1. Issue closed

    Closed (not planned): fix: validate ZCash note versions against their shielded pools

    Closed as not planned (won’t fix, invalid, or handled elsewhere): nothing shipped through this issue. Labels such as release-notes/include do not change that.

    brave-browser#58287
    Evidence
    • closed by kdenhartog at 2026-08-21T00:40:37Z
    • state reason: not_planned

    Source time: · Detected: · Backfilled from source history

    2026-08-21T00:40:37Z
  2. New issue

    New bug report: fix: validate ZCash note versions against their shielded pools

    Opened in brave-browser#58287. This is a report or request, not a confirmed change to Brave Wallet.

    brave-browser#58287
    Evidence
    • created 2026-08-19T20:02:13Z

    Source time: · Detected: · Backfilled from source history

    2026-08-19T20:02:13Z