{"schemaVersion":1,"project":{"id":"orchard-security-research","name":"Orchard vulnerability research","description":"Taylor Hornby’s responsible disclosure of the Orchard counterfeiting vulnerability. The grant is an individual research award, distinct from funding the Orchard library or any organization’s general development.","category":"Research","website":"https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/","communityId":null},"assembledAt":"2026-11-05T13:20:33.307Z","registryCheckedAt":"2026-10-04","repositorySnapshotAt":"2026-11-05T03:06:01.981Z","ledgerImportedAt":"2026-11-05T10:46:00.866Z","coverage":{"proposalsAvailable":true,"paymentsAvailable":true,"releasesComplete":false},"sources":[{"kind":"funding","label":"Official application identifies the project, recipient and scope","url":"https://github.com/Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram/issues/51","observedAt":"2026-10-04"},{"kind":"website","label":"Researcher’s public vulnerability account and work log","url":"https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/","observedAt":"2026-10-04"},{"kind":"funding","label":"Orchard Counterfeiting Vulnerability Bug Bounty","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A46","observedAt":"2026-11-05T10:46:00.866Z"},{"kind":"funding","label":"Taylor Hornby - Bonus Grant for Orchard Counterfeiting Vulnerability Bug Bounty","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A51","observedAt":"2026-11-05T10:46:00.866Z"},{"kind":"funding","label":"Taylor Hornby - Bonus Grant for Orchard Counterfeiting Vulnerability Bug Bounty · proposal scope","url":"https://github.com/Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram/issues/53","observedAt":"2026-10-04"},{"kind":"funding","label":"Taylor Hornby - Bonus Grant for Orchard Counterfeiting Vulnerability Bug Bounty · proposal scope","url":"https://forum.zcashcommunity.com/t/taylor-hornby-bonus-grant-for-orchard-counterfeiting-vulnerability-bug-bounty/57025","observedAt":"2026-11-05T10:46:00.866Z"},{"kind":"funding","label":"Orchard Counterfeiting Vulnerability Bug Bounty · proposal scope","url":"https://forum.zcashcommunity.com/t/retroactive-grant-application-orchard-counterfeiting-vulnerability-bug-bounty/57008","observedAt":"2026-11-05T10:46:00.866Z"}],"repositories":[],"grants":[{"id":"grant-9597b6762d3a5940158822eb","title":"Taylor Hornby - Bonus Grant for Orchard Counterfeiting Vulnerability Bug Bounty","program":"coinholder","status":"approved","statusBasis":"published_proposal","sharedWith":[],"requestedUsdCents":"75000000","approvedUsdCents":null,"budgetUsdCents":{"known":"75000000","records":1,"missing":0},"paidBudgetUsdCents":{"known":"75000000","records":1,"missing":0},"recordedZecZat":{"known":"65439890000","records":1,"missing":0},"source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A51","observedAt":"2026-11-05T10:46:00.866Z"},"scopeUrl":"https://forum.zcashcommunity.com/t/taylor-hornby-bonus-grant-for-orchard-counterfeiting-vulnerability-bug-bounty/57025","milestones":[{"id":"de205bd4a22c0f16594f3220199ed978c59a7172ab6bda9cbacaaf4664381e09","title":"Ledger milestone","deliverable":null,"paymentRecorded":true,"paidDate":"2026-10-16","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A16","observedAt":"2026-11-05T10:45:57.136Z"},"deliveryEvidence":[]}]},{"id":"grant-9a787eddc97ee3c3e7e0ad0b","title":"Orchard Counterfeiting Vulnerability Bug Bounty","program":"coinholder","status":"approved","statusBasis":"published_proposal","sharedWith":[],"requestedUsdCents":"75000000","approvedUsdCents":null,"budgetUsdCents":{"known":"75000000","records":1,"missing":0},"paidBudgetUsdCents":{"known":"75000000","records":1,"missing":0},"recordedZecZat":{"known":"65439890000","records":1,"missing":0},"source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A46","observedAt":"2026-11-05T10:46:00.866Z"},"scopeUrl":"https://forum.zcashcommunity.com/t/retroactive-grant-application-orchard-counterfeiting-vulnerability-bug-bounty/57008","milestones":[{"id":"bc162fa874cfc423ee722e0a60ca3763597cc62aeaf2ea9e8207be3658260555","title":"Ledger milestone","deliverable":null,"paymentRecorded":true,"paidDate":"2026-10-16","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A15","observedAt":"2026-11-05T10:45:57.136Z"},"deliveryEvidence":[]}]}],"timeline":[{"id":"payment-bc162fa874cfc423ee722e0a60ca3763597cc62aeaf2ea9e8207be3658260555","kind":"payment","title":"Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Budget value: $750,000.00. Recorded payment: 654.3989 ZEC.","budgetUsdCents":"75000000","recordedZecZat":"65439890000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A15","observedAt":"2026-11-05T10:45:57.136Z"},"grantId":"grant-9a787eddc97ee3c3e7e0ad0b"},{"id":"payment-de205bd4a22c0f16594f3220199ed978c59a7172ab6bda9cbacaaf4664381e09","kind":"payment","title":"Taylor Hornby - Bonus Grant for Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Budget value: $750,000.00. Recorded payment: 654.3989 ZEC.","budgetUsdCents":"75000000","recordedZecZat":"65439890000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A16","observedAt":"2026-11-05T10:45:57.136Z"},"grantId":"grant-9597b6762d3a5940158822eb"},{"id":"grant-9597b6762d3a5940158822eb-decision","kind":"decision","title":"approved · Taylor Hornby - Bonus Grant for Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Published proposal status from the OpenZcash ledger mirror.","date":"2026-09-29","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A51","observedAt":"2026-11-05T10:46:00.866Z"},"grantId":"grant-9597b6762d3a5940158822eb"},{"id":"grant-9a787eddc97ee3c3e7e0ad0b-decision","kind":"decision","title":"approved · Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Published proposal status from the OpenZcash ledger mirror.","date":"2026-09-29","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A46","observedAt":"2026-11-05T10:46:00.866Z"},"grantId":"grant-9a787eddc97ee3c3e7e0ad0b"},{"id":"grant-9597b6762d3a5940158822eb-proposal","kind":"proposal","title":"Taylor Hornby - Bonus Grant for Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Application recorded. Requested funding is separate from approval and payment.","date":"2026-08-14","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A51","observedAt":"2026-11-05T10:46:00.866Z"},"grantId":"grant-9597b6762d3a5940158822eb"},{"id":"grant-9a787eddc97ee3c3e7e0ad0b-proposal","kind":"proposal","title":"Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Application recorded. Requested funding is separate from approval and payment.","date":"2026-08-13","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A46","observedAt":"2026-11-05T10:46:00.866Z"},"grantId":"grant-9a787eddc97ee3c3e7e0ad0b"}],"gaps":["No milestone acceptance evidence is linked in this history yet. This is a coverage gap, not a finding of non-delivery.","No repository is linked. Community output and other non-code work must be assessed from its own sources."],"reviews":[],"reportLinks":[],"notes":["Requested USD, approved status, ledger budgets and recorded ZEC payments are distinct. The current ledger has no separate authoritative approved-amount field.","Amounts belong to associated grants, not an allocation to this component. Shared grants must not be added across project histories; programs remain separate.","Repository releases are a bounded dated snapshot, not a complete release history. A release proves publication, not milestone acceptance, adoption or causal impact.","No record is evidence of missing coverage, not zero funding, a missed deadline or team failure. Reports outside the linked sources may exist."],"insights":{"grants":2,"paidEntries":2,"ledgerEntries":2,"acceptedEntries":0,"acceptanceGaps":2,"publishedArtifacts":0,"integrations":0,"usageObservations":0,"reportSources":0,"publicWorkSources":0,"latestWork":null,"latestPayment":{"id":"payment-bc162fa874cfc423ee722e0a60ca3763597cc62aeaf2ea9e8207be3658260555","kind":"payment","title":"Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Budget value: $750,000.00. Recorded payment: 654.3989 ZEC.","budgetUsdCents":"75000000","recordedZecZat":"65439890000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A15","observedAt":"2026-11-05T10:45:57.136Z"},"grantId":"grant-9a787eddc97ee3c3e7e0ad0b"},"latestDecision":{"id":"grant-9597b6762d3a5940158822eb-decision","kind":"decision","title":"approved · Taylor Hornby - Bonus Grant for Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Published proposal status from the OpenZcash ledger mirror.","date":"2026-09-29","evidence":"source_record","source":{"label":"OpenZcash proposal ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=1847584751&range=A51","observedAt":"2026-11-05T10:46:00.866Z"},"grantId":"grant-9597b6762d3a5940158822eb"},"latestEvent":{"id":"payment-bc162fa874cfc423ee722e0a60ca3763597cc62aeaf2ea9e8207be3658260555","kind":"payment","title":"Orchard Counterfeiting Vulnerability Bug Bounty","detail":"Budget value: $750,000.00. Recorded payment: 654.3989 ZEC.","budgetUsdCents":"75000000","recordedZecZat":"65439890000","date":"2026-10-16","evidence":"source_record","source":{"label":"OpenZcash payment ledger","url":"https://docs.google.com/spreadsheets/d/1FQ28rDCyRW0TiNxrm3rgD8ai2KGUsXAjPieQmI1kKKg/edit#gid=722519692&range=A15","observedAt":"2026-11-05T10:45:57.136Z"},"grantId":"grant-9a787eddc97ee3c3e7e0ad0b"},"checks":[{"title":"Link milestone acceptance","detail":"2 paid ledger entries have no linked acceptance evidence. Check the funded scope and the decision that accepted it.","section":"funding"},{"title":"Establish measured use","detail":"No usage observation with a defined period and population is linked. Usage remains unassessed.","section":"evidence"},{"title":"Link public work","detail":"Add dated project reports or artifacts, including non-code output. Missing links do not establish inactivity.","section":"evidence"}],"basis":"all-linked-history"}}