On November 11, 2026, PANews reported that AnomaPay disclosed on X an external security vulnerability in the RISC Zero proof system it uses, a flaw that could endanger user funds.
To protect users and keep funds secure, the risc0 verifier behind Anoma was paused and is to be upgraded by the RISC Zero team. AnomaPay said funds already deposited by users remain safe. Those funds are temporarily inaccessible until the Anoma protocol is upgraded to V2, which will include RISC Zero’s new security update. The upgrade is expected to take about two weeks.
AnomaPay described the downtime as undesirable but necessary to protect user funds. Users do not need to take any action. After the upgrade is complete, funds will automatically migrate to V2 and access will be restored.
The report did not describe the technical details of the external vulnerability or give a more precise timetable beyond the roughly two-week estimate.
Original report: PANews, November 11, 2026, 17:43 UTC+8
