AnomaPay: Proof system has security vulnerabilities, user funds temporarily inaccessible

November 11 - AnomaPay announced that the RISC Zero proof system it uses has been found to have an external security vulnerability that could compromise the safety of user funds.

To protect user assets, Anoma has suspended the relevant RISC Zero verifier, which will subsequently be upgraded by the RISC Zero team. AnomaPay stated that the funds users have deposited remain safe, but will be temporarily inaccessible until the Anoma protocol is upgraded to V2.

The upgrade is expected to take about two weeks, at which point the security updates provided by RISC Zero will be integrated. Users do not need to take any action; funds will automatically migrate to V2 and access will be restored after the upgrade is complete.