Firo

看空：2026年8月，Spark協議揭露了一項多輸入支付漏洞，帶來了偽造貨幣的風險；官方暫時停用了多輸入支付功能。雖然未發現實際通膨，但短期內市場信心受到動搖（）。 看多：8月27日發佈了v0.14.18.0版本，並於9月4日啟動硬分叉，永久修復了該漏洞，恢復了完整的Spark多輸入功能（）；9月8日，FIRO在隱私交易平台Nonlogs.io上市，新增包含FIRO/XMR（）在內的交易對。 無回購/銷毀、收益、持倉權益或解鎖相關進展。

On 13 August 2026 Firo disclosed a flaw in multi-input Spark spends that could, under specific conditions, forge coins and inflate supply; the researcher who reported it minted about 200 FIRO on mainnet in a controlled test. The team shipped 0.14.17.2 as a stopgap that restricted Spark spends to a single input, accepting weaker privacy because split payments can be correlated. The flaw did not touch wallets or keys and could not move a user's coins directly; only the proof logic for multi-input spends was affected.

Firo's permanent fix activated on 4 September at block 1,371,000. Version 0.14.18.0 introduces a versioned Chaum V2 proof and a new transaction format that restores multi-input Spark spending, with no migration needed for existing coins, addresses or keys. Cypher Stack reviewed the fix with HashCloak assisting, mining pools and masternode hosts deployed protections before disclosure, and a full technical post-mortem was promised after activation. The promised disclosure followed, covering the root cause, what the stopgap achieved and how the permanent fix was validated.

Firo plans to harden Spark validation and reorganisation handling further, publish the post-mortem and commission outside review, and use the episode to show that a privacy coin can coordinate an emergency response.

Poramin Insom（創始人）：於2016年創立Zcoin（現為Firo）。擁有約翰霍普金斯大學安全資訊學碩士學位，並撰寫了關於實用型Zerocoin實作的論文。創建了首個Zerocoin實作，並推動了MTP挖礦演算法的研究。2018年促成了泰國民主黨在Firo區塊鏈上的初選，這是首個大規模政治選舉應用於區塊鏈。曾於泰國軍方從事網路戰工作。 Reuben Yap（共同創辦人）：於項目成立不久後加入，現任項目管理人。主導整體策略、開發與研究。創辦了東南亞最早期的VPN服務之一以對抗審查。曾任律師事務所合夥人，擁有超過10年的法律與機構顧問經驗。曾獲BBC、Nasdaq Tradetalks、Forbes、Coindesk、Reuters、Cheddar News等媒體報導。 Aram Jivanyan（首席隱私架構師）：創建了Lelantus與Lelantus Spark協議，影響了Monero的Triptych/Seraphis及Beam的Lelantus-MW。設計了注重隱私的投票系統Aura。