Zebra 4.3.0 Urgent Security Fixes and ZIP-235 Upgrade
Zebra 4.3.0 is released with critical security fixes. Node operators are strongly urged to upgrade immediately to address two issues in V5 transaction verification/deserialization. Zebra 4.3.0 fixes a consensus bug that could skip full proof verification for V5 transactions based only on mined transaction IDs, which could enable a chain split between Zebra nodes and the rest of the network. It also fixes a deserialization panic (via librustzcash) that could potentially crash a Zebra node.
Zebra 4.3.0 also expands test coverage to prevent regressions. On features, this release introduces initial support for ZIP-235 (Network Sustainability Mechanism), but it is disabled by default behind a feature flag and is not active in production builds yet. Developers get improved profiling documentation and tooling.
Additional bug fixes include restored block propagation on Regtest, corrected getblocksubsidy pre-Canopy reward calculations (properly subtracting Founders’ Reward), and a Testnet CPU performance regression fix by caching parsed checkpoints.
Notable contributors are credited for this release. Traders should see this primarily as infrastructure risk control: if operators delay upgrades, client inconsistency and potential instability could rise, but the ZIP-235 rollout is gated and not yet live.
Neutral
This is primarily a client-software maintenance update for Zcash’s Rust-based node implementation (Zebra). The headline risk is security: Zebra 4.3.0 patches two bugs that could otherwise cause verification inconsistencies or even node crashes, which can raise local network instability if some operators don’t upgrade. Historically, urgent node/security releases tend to create short-term attention and sometimes minor volatility around the related ecosystem, but they usually don’t directly change token economics.
On-chain fundamentals also matter here: ZIP-235 support is introduced but disabled by default behind a feature flag, so it is not an active production change. That limits expectations of immediate impact on supply/demand dynamics. Net effect: neutral for markets. In the short term, traders may watch for any broader community reaction to the security advisories; in the long term, once ZIP-235 becomes active, it could be more market-relevant, but that timing is not signaled in this release.