Reported November 11, 2026, at 17:52 (UTC+8). AnomaPay, a privacy payments app built on the Anoma Web3 operating system, said a security vulnerability had been found in the RISC Zero proof system it uses. According to AnomaPay, the issue could put user funds at risk, so the risc0 validator behind Anoma was paused pending an upgrade by the RISC Zero team.
AnomaPay said deposited funds were safe but temporarily inaccessible. It expected access to return after the Anoma protocol upgraded to V2 with the RISC Zero security update—a process it estimated would take up to two weeks. AnomaPay said users did not need to act: funds would migrate to V2 automatically.
That timeline was an estimate at the time of the original report, not confirmation that the upgrade has since been completed.
