{"schemaVersion":1,"project":{"id":"zebra-security-research","name":"Zebra vulnerability research","description":"Independent security research concerning Zebra consensus and node vulnerabilities. Awards belong to the named researchers and scopes, not to the Zcash Foundation or all Zebra development.","category":"Research","website":"https://github.com/Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram/issues/58","communityId":null},"assembledAt":"2026-11-05T01:06:46.290Z","registryCheckedAt":"2026-10-04","repositorySnapshotAt":"2026-11-04T03:03:28.143Z","ledgerImportedAt":"2026-11-04T20:48:33.897Z","coverage":{"proposalsAvailable":true,"paymentsAvailable":true,"releasesComplete":false},"sources":[{"kind":"website","label":"Official application identifies the project, recipient and scope","url":"https://github.com/Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram/issues/58","observedAt":"2026-10-04"},{"kind":"reference","label":"Zebra advisory credits the researcher named in the application","url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-gq4h-3grw-2rhv","observedAt":"2026-10-04"},{"kind":"funding","label":"Five Critical Zebra Consensus Divergence Vulnerabilities","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A54","observedAt":"2026-11-04T20:48:33.897Z"},{"kind":"funding","label":"Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202)","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A50","observedAt":"2026-11-04T20:48:33.897Z"},{"kind":"funding","label":"Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202) · proposal scope","url":"https://github.com/Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram/issues/54","observedAt":"2026-10-04"},{"kind":"funding","label":"Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202) · proposal scope","url":"https://forum.zcashcommunity.com/t/retroactive-grant-application-cve-2026-34202-zebra-remote-denial-of-service-critical/57024","observedAt":"2026-11-04T20:48:33.897Z"},{"kind":"funding","label":"Five Critical Zebra Consensus Divergence Vulnerabilities · proposal scope","url":"https://forum.zcashcommunity.com/t/retroactive-grant-application-five-critical-zebra-consensus-divergence-vulnerabilities/57034","observedAt":"2026-11-04T20:48:33.897Z"}],"repositories":[],"grants":[{"id":"grant-34e4074cda7d83263ec9e8cd","title":"Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202)","program":"coinholder","status":"approved","statusBasis":"published_proposal","sharedWith":[],"requestedUsdCents":"15000000","approvedUsdCents":null,"budgetUsdCents":{"known":"15000000","records":1,"missing":0},"paidBudgetUsdCents":{"known":"15000000","records":1,"missing":0},"recordedZecZat":{"known":"13087980000","records":1,"missing":0},"source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A50","observedAt":"2026-11-04T20:48:33.897Z"},"scopeUrl":"https://forum.zcashcommunity.com/t/retroactive-grant-application-cve-2026-34202-zebra-remote-denial-of-service-critical/57024","milestones":[{"id":"28c0145ec0bf0ef8916ce8317372778c1eb5d8a346a464e310f3d06b3f53a70d","title":"Ledger milestone","deliverable":null,"paymentRecorded":true,"paidDate":"2026-10-16","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A20","observedAt":"2026-11-04T20:48:29.955Z"},"deliveryEvidence":[]}]},{"id":"grant-46402e67d1b39c31fe92b176","title":"Five Critical Zebra Consensus Divergence Vulnerabilities","program":"coinholder","status":"approved","statusBasis":"published_proposal","sharedWith":[],"requestedUsdCents":"42500000","approvedUsdCents":null,"budgetUsdCents":{"known":"42500000","records":1,"missing":0},"paidBudgetUsdCents":{"known":"42500000","records":1,"missing":0},"recordedZecZat":{"known":"37082600000","records":1,"missing":0},"source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A54","observedAt":"2026-11-04T20:48:33.897Z"},"scopeUrl":"https://forum.zcashcommunity.com/t/retroactive-grant-application-five-critical-zebra-consensus-divergence-vulnerabilities/57034","milestones":[{"id":"d6806a565641099bb228a087610fa1abb3efe82b08aa9785ffa354b016dcec79","title":"Ledger milestone","deliverable":null,"paymentRecorded":true,"paidDate":"2026-10-16","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A21","observedAt":"2026-11-04T20:48:29.955Z"},"deliveryEvidence":[]}]}],"timeline":[{"id":"payment-28c0145ec0bf0ef8916ce8317372778c1eb5d8a346a464e310f3d06b3f53a70d","kind":"payment","title":"Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202)","detail":"Budget value: $150,000.00. Recorded payment: 130.8798 ZEC.","budgetUsdCents":"15000000","recordedZecZat":"13087980000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A20","observedAt":"2026-11-04T20:48:29.955Z"},"grantId":"grant-34e4074cda7d83263ec9e8cd"},{"id":"payment-d6806a565641099bb228a087610fa1abb3efe82b08aa9785ffa354b016dcec79","kind":"payment","title":"Five Critical Zebra Consensus Divergence Vulnerabilities","detail":"Budget value: $425,000.00. Recorded payment: 370.826 ZEC.","budgetUsdCents":"42500000","recordedZecZat":"37082600000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A21","observedAt":"2026-11-04T20:48:29.955Z"},"grantId":"grant-46402e67d1b39c31fe92b176"},{"id":"grant-34e4074cda7d83263ec9e8cd-decision","kind":"decision","title":"approved · Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202)","detail":"Published proposal status from the OpenZcash ledger mirror.","date":"2026-09-29","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A50","observedAt":"2026-11-04T20:48:33.897Z"},"grantId":"grant-34e4074cda7d83263ec9e8cd"},{"id":"grant-46402e67d1b39c31fe92b176-decision","kind":"decision","title":"approved · Five Critical Zebra Consensus Divergence Vulnerabilities","detail":"Published proposal status from the OpenZcash ledger mirror.","date":"2026-09-29","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A54","observedAt":"2026-11-04T20:48:33.897Z"},"grantId":"grant-46402e67d1b39c31fe92b176"},{"id":"grant-34e4074cda7d83263ec9e8cd-proposal","kind":"proposal","title":"Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202)","detail":"Application recorded. Requested funding is separate from approval and payment.","date":"2026-08-14","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A50","observedAt":"2026-11-04T20:48:33.897Z"},"grantId":"grant-34e4074cda7d83263ec9e8cd"},{"id":"grant-46402e67d1b39c31fe92b176-proposal","kind":"proposal","title":"Five Critical Zebra Consensus Divergence Vulnerabilities","detail":"Application recorded. Requested funding is separate from approval and payment.","date":"2026-08-14","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A54","observedAt":"2026-11-04T20:48:33.897Z"},"grantId":"grant-46402e67d1b39c31fe92b176"}],"gaps":["No milestone acceptance evidence is linked in this history yet. This is a coverage gap, not a finding of non-delivery.","No repository is linked. Community output and other non-code work must be assessed from its own sources."],"reviews":[],"reportLinks":[],"notes":["Requested USD, approved status, ledger budgets and recorded ZEC payments are distinct. The current ledger has no separate authoritative approved-amount field.","Amounts belong to associated grants, not an allocation to this component. Shared grants must not be added across project histories; programs remain separate.","Repository releases are a bounded dated snapshot, not a complete release history. A release proves publication, not milestone acceptance, adoption or causal impact.","No record is evidence of missing coverage, not zero funding, a missed deadline or team failure. Reports outside the linked sources may exist."],"insights":{"grants":2,"paidEntries":2,"ledgerEntries":2,"acceptedEntries":0,"acceptanceGaps":2,"publishedArtifacts":0,"integrations":0,"usageObservations":0,"reportSources":0,"publicWorkSources":0,"latestWork":null,"latestPayment":{"id":"payment-28c0145ec0bf0ef8916ce8317372778c1eb5d8a346a464e310f3d06b3f53a70d","kind":"payment","title":"Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202)","detail":"Budget value: $150,000.00. Recorded payment: 130.8798 ZEC.","budgetUsdCents":"15000000","recordedZecZat":"13087980000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A20","observedAt":"2026-11-04T20:48:29.955Z"},"grantId":"grant-34e4074cda7d83263ec9e8cd"},"latestDecision":{"id":"grant-34e4074cda7d83263ec9e8cd-decision","kind":"decision","title":"approved · Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202)","detail":"Published proposal status from the OpenZcash ledger mirror.","date":"2026-09-29","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A50","observedAt":"2026-11-04T20:48:33.897Z"},"grantId":"grant-34e4074cda7d83263ec9e8cd"},"latestEvent":{"id":"payment-28c0145ec0bf0ef8916ce8317372778c1eb5d8a346a464e310f3d06b3f53a70d","kind":"payment","title":"Zebra Critical Vulnerability Bug Bounty (CVE-2026-34202)","detail":"Budget value: $150,000.00. Recorded payment: 130.8798 ZEC.","budgetUsdCents":"15000000","recordedZecZat":"13087980000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A20","observedAt":"2026-11-04T20:48:29.955Z"},"grantId":"grant-34e4074cda7d83263ec9e8cd"},"checks":[{"title":"Link milestone acceptance","detail":"2 paid ledger entries have no linked acceptance evidence. Check the funded scope and the decision that accepted it.","section":"funding"},{"title":"Establish measured use","detail":"No usage observation with a defined period and population is linked. Usage remains unassessed.","section":"evidence"},{"title":"Link public work","detail":"Add dated project reports or artifacts, including non-code output. Missing links do not establish inactivity.","section":"evidence"}],"basis":"all-linked-history"}}