A Zcash vulnerability could have allowed double-spending within the network's flagship privacy pool, though no exploitation occurred.