> If a bug ever lets someone mint fake extra zcash $ZEC inside a shielded pool, here's what happens: The "turnstile" system caps how much total money can ever leave the pool, only the real deposits that came in are allowed out. But all the coins inside are completely mixed and identical. No one can tell fake from real. So if the hacker rushes out first and cashes out, they walk away with real money. The regular users who try to leave last? They get stuck - they literally can't take all their money out. The turnstile stops the whole network from being flooded with fake coins… but the last people to leave end up holding the bag. (their own docs confirm this) Since you can't prove this bug hasn't been exploited, it's advised to move your coins from the shielded pool ASAP.