Zano Reverts a Month of Blockchain History After Exploit

Zano has rolled back about a month of blockchain history after an attacker exploited a flaw in its Gateway Address system to create unauthorized ZANO and fUSD tokens, the project said in a postmortem. The rollback removed the illicit supply but also erased legitimate transactions from the affected period. Zano says it is working to restore impacted balances, though it has not set a completion deadline. According to Zano’s account, the attacker created about 18.4 million ZANO on August 29 and minted a similar amount on September 25. The project also said the attacker used the vulnerability to create fUSD, a stablecoin used on the network. Zano’s postmortem describes the two ZANO mints as totaling about 36.9 million tokens. It did not provide a confirmed amount of fUSD created or a count of affected users. Zano said the unauthorized coins functioned like legitimate ZANO and could be spent normally. Once they entered the network, the project said, they could not be reliably distinguished from genuine coins. That meant developers could not selectively remove the unauthorized supply while preserving all other activity, according to the postmortem.