{"schemaVersion":1,"project":{"id":"alex-sol-node-security-research","name":"Alex Sol node security research","description":"Alex Sol’s independent vulnerability research across zcashd and Zebra. The retroactive application covers the researcher’s disclosed findings, separate from the node maintainers’ remediation work.","category":"Research","website":"https://github.com/Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram/issues/57","communityId":null},"assembledAt":"2026-11-05T01:06:01.758Z","registryCheckedAt":"2026-10-04","repositorySnapshotAt":"2026-11-04T03:03:28.143Z","ledgerImportedAt":"2026-11-04T20:48:33.897Z","coverage":{"proposalsAvailable":true,"paymentsAvailable":true,"releasesComplete":false},"sources":[{"kind":"website","label":"Official application identifies the project, recipient and scope","url":"https://github.com/Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram/issues/57","observedAt":"2026-11-04T20:48:33.897Z"},{"kind":"reference","label":"ZODL disclosure referenced by the researcher","url":"https://zodl.com/zcashd-sprout-verification-vulnerability","observedAt":"2026-10-04"},{"kind":"reference","label":"Official Zebra advisory for one listed finding","url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-3vmh-33xr-9cqh","observedAt":"2026-10-04"},{"kind":"funding","label":"Temporary Detectable Unlimited mint and sell Exploit","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A49","observedAt":"2026-11-04T20:48:33.897Z"}],"repositories":[],"grants":[{"id":"grant-7c7795437edc009bbc8c89a7","title":"Temporary Detectable Unlimited mint and sell Exploit","program":"coinholder","status":"approved","statusBasis":"published_proposal","sharedWith":[],"requestedUsdCents":"40000000","approvedUsdCents":null,"budgetUsdCents":{"known":"40000000","records":1,"missing":0},"paidBudgetUsdCents":{"known":"40000000","records":1,"missing":0},"recordedZecZat":{"known":"34901270000","records":1,"missing":0},"source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A49","observedAt":"2026-11-04T20:48:33.897Z"},"scopeUrl":"https://github.com/Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram/issues/57","milestones":[{"id":"78a1f2cc83eea103dee8e8a467868b201280a18df43d3c59126eb59f8ec3b828","title":"Ledger milestone","deliverable":null,"paymentRecorded":true,"paidDate":"2026-10-16","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A19","observedAt":"2026-11-04T20:48:29.955Z"},"deliveryEvidence":[]}]}],"timeline":[{"id":"payment-78a1f2cc83eea103dee8e8a467868b201280a18df43d3c59126eb59f8ec3b828","kind":"payment","title":"Temporary Detectable Unlimited mint and sell Exploit","detail":"Budget value: $400,000.00. Recorded payment: 349.0127 ZEC.","budgetUsdCents":"40000000","recordedZecZat":"34901270000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A19","observedAt":"2026-11-04T20:48:29.955Z"},"grantId":"grant-7c7795437edc009bbc8c89a7"},{"id":"grant-7c7795437edc009bbc8c89a7-decision","kind":"decision","title":"approved · Temporary Detectable Unlimited mint and sell Exploit","detail":"Published proposal status from the OpenZcash ledger mirror.","date":"2026-09-29","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A49","observedAt":"2026-11-04T20:48:33.897Z"},"grantId":"grant-7c7795437edc009bbc8c89a7"},{"id":"grant-7c7795437edc009bbc8c89a7-proposal","kind":"proposal","title":"Temporary Detectable Unlimited mint and sell Exploit","detail":"Application recorded. Requested funding is separate from approval and payment.","date":"2026-08-14","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A49","observedAt":"2026-11-04T20:48:33.897Z"},"grantId":"grant-7c7795437edc009bbc8c89a7"}],"gaps":["No milestone acceptance evidence is linked in this history yet. This is a coverage gap, not a finding of non-delivery.","No repository is linked. Community output and other non-code work must be assessed from its own sources."],"reviews":[],"reportLinks":[],"notes":["Requested USD, approved status, ledger budgets and recorded ZEC payments are distinct. The current ledger has no separate authoritative approved-amount field.","Amounts belong to associated grants, not an allocation to this component. Shared grants must not be added across project histories; programs remain separate.","Repository releases are a bounded dated snapshot, not a complete release history. A release proves publication, not milestone acceptance, adoption or causal impact.","No record is evidence of missing coverage, not zero funding, a missed deadline or team failure. Reports outside the linked sources may exist."],"insights":{"grants":1,"paidEntries":1,"ledgerEntries":1,"acceptedEntries":0,"acceptanceGaps":1,"publishedArtifacts":0,"integrations":0,"usageObservations":0,"reportSources":0,"publicWorkSources":0,"latestWork":null,"latestPayment":{"id":"payment-78a1f2cc83eea103dee8e8a467868b201280a18df43d3c59126eb59f8ec3b828","kind":"payment","title":"Temporary Detectable Unlimited mint and sell Exploit","detail":"Budget value: $400,000.00. Recorded payment: 349.0127 ZEC.","budgetUsdCents":"40000000","recordedZecZat":"34901270000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A19","observedAt":"2026-11-04T20:48:29.955Z"},"grantId":"grant-7c7795437edc009bbc8c89a7"},"latestDecision":{"id":"grant-7c7795437edc009bbc8c89a7-decision","kind":"decision","title":"approved · Temporary Detectable Unlimited mint and sell Exploit","detail":"Published proposal status from the OpenZcash ledger mirror.","date":"2026-09-29","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A49","observedAt":"2026-11-04T20:48:33.897Z"},"grantId":"grant-7c7795437edc009bbc8c89a7"},"latestEvent":{"id":"payment-78a1f2cc83eea103dee8e8a467868b201280a18df43d3c59126eb59f8ec3b828","kind":"payment","title":"Temporary Detectable Unlimited mint and sell Exploit","detail":"Budget value: $400,000.00. Recorded payment: 349.0127 ZEC.","budgetUsdCents":"40000000","recordedZecZat":"34901270000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A19","observedAt":"2026-11-04T20:48:29.955Z"},"grantId":"grant-7c7795437edc009bbc8c89a7"},"checks":[{"title":"Link milestone acceptance","detail":"1 paid ledger entry has no linked acceptance evidence. Check the funded scope and the decision that accepted it.","section":"funding"},{"title":"Establish measured use","detail":"No usage observation with a defined period and population is linked. Usage remains unassessed.","section":"evidence"},{"title":"Link public work","detail":"Add dated project reports or artifacts, including non-code output. Missing links do not establish inactivity.","section":"evidence"}],"basis":"all-linked-history"}}