Zcash developers patched a critical node software flaw that could have allowed attackers to drain millions of ZEC from a legacy shielded pool. Operators and custodians are being urged to upgrade immediately and audit affected systems.