zkBob to Enable Withdrawal-Only Mode Within One Week

**zkBob has published a detailed post-mortem** following a security vulnerability discovery in their privacy protocol. **Key Details:** - Full vulnerability analysis now available in [zkBob documentation](https://docs.zkbob.com/zkbob-overview/vulnerability-post-mortem) - All pools operating in **withdraw-only mode** with fixes deployed - Users strongly advised to withdraw funds immediately - Withdrawals are safe but **will not process instantly** **What Users Should Do:** - Review the post-mortem for specific actions required - Proceed with withdrawals from all pools via [zkBob app](https://app.zkbob.com/) - Expect processing delays for submitted withdrawals The post-mortem covers the vulnerability's cause, implemented remediations, and necessary user actions for anyone holding funds in zkBob pools.

**zkBob** has announced that a comprehensive post-mortem report on a recently discovered vulnerability will be released later this week. - The report will provide detailed information about the security issue - No specific details about the vulnerability's nature or impact have been disclosed yet - This follows a pattern of transparency, similar to previous incidents like the CoW Swap vulnerability disclosure in April zkBob is a privacy-focused protocol that enables anonymous token transfers using zero-knowledge proofs. The platform supports WETH, ETH, USDC, and BOB tokens, allowing users to make private transactions without exposing amounts or recipients. The upcoming post-mortem is expected to include root cause analysis and any implemented security measures. Users should monitor official zkBob channels for the full report.

zkBob is transitioning to a new withdrawal mechanism for its privacy pools. **Key Changes:** - Users exiting USDC or ETH pools will receive **on-chain claims** instead of immediate transfers - Claims will be processed on a **regular schedule** - Expected redemption rate: **1:1** for the underlying assets This withdrawal phase represents a shift in how users access their funds from the privacy-focused protocol. The claim-based system introduces a processing delay compared to instant withdrawals, though the protocol maintains that full redemption value will be preserved. zkBob continues to offer private token transfers using zero-knowledge proofs, supporting WETH, ETH, USDC, and BOB tokens.

**zkBob has temporarily paused all pools** as a precautionary measure while deploying a fix to its circuits and verifier contracts. **Key Updates:** - Circuit and verifier contract updates are being deployed on Polygon and Optimism - All pools will reopen in **withdrawal-only mode** once the upgrade is complete - Deposits and internal transfers will remain disabled - Existing pools will be gradually wound down The privacy-focused protocol is taking these steps to ensure users can safely withdraw their funds. No timeline has been provided for when withdrawals will resume.