Reported November 11, 2026, at 17:43 (UTC+8). AnomaPay said on X that an external security vulnerability in the RISC Zero proof system it uses could put user funds at risk. The risc0 verifier underlying Anoma has been paused and is to be upgraded by the RISC Zero team.
According to AnomaPay, funds users have already deposited are safe but temporarily inaccessible. Access is expected to resume after Anoma is upgraded to V2 with RISC Zero’s security update, a process AnomaPay estimated would take about two weeks. It said users need take no action: their funds will migrate to V2 automatically when the upgrade is complete. These are AnomaPay’s statements and timeline, not confirmation that the upgrade has finished.
