Zano says exploiter minted 1.8 quadrillion fUSD before rollback

Zano said an attacker used a Gateway Address vulnerability to mint 36.9 million ZANO and 1.8 quadrillion fUSD before the project rolled back about a month of blockchain history. According to Zano’s postmortem, the exploit first appeared on Aug. 29, when about 18.4 million ZANO were created in one transaction. A second exploit on Sept. 25 produced another 18.4 million ZANO, followed by the unauthorized minting of fUSD. The company said the fake assets looked like normal network outputs and could be spent like legitimate coins, which made the issue hard to detect. Zano later said it rolled back the chain to remove the unauthorized supply, despite the impact on user trust and on some valid transactions. Zano also said the attacker paid a 100 ZANO registration fee to set up the exploit. The project is now working to restore affected balances through its developer fund, personal contributions from team members, and exchangebased recovery steps.