On November 11, 2026, TechFlow (深潮) reported that AnomaPay, a privacy payment app, had disclosed a security issue in the proof system it uses. The report was published at 17:44:50 China Standard Time (UTC+8).
According to AnomaPay, an external vulnerability had been found in the RISC Zero proof system it uses and could put user funds at risk. To protect users, the risc0 verifier behind Anoma was paused. The RISC Zero team was to upgrade it.
AnomaPay said funds users had deposited were safe, but temporarily inaccessible until the Anoma protocol is upgraded to a V2 version that includes RISC Zero’s new security update. The upgrade was expected to take two weeks. Users did not need to take any action. After the upgrade, those funds were to be migrated automatically to V2 and access was to be restored.
The November 11, 2026 account does not describe the flaw itself or any amounts. It only sets out the pause, AnomaPay’s statement that existing deposits were safe, and the planned migration.
Original article: TechFlow
