From Zooko's blog 30m ago:
“The vulnerability was real and exploitable. Taylor, with the help of Opus 4.8, wrote a complete exploit which, when he tested it in a local regtest environment, generated unlimited, undetectable counterfeit ZEC. If he had run the same tool on Zcash mainnet it would have generated unlimited, undetectable counterfeit ZEC in his mainnet Zcash wallet.”
“The vulnerability was present from Orchard's activation in May 2022 until the emergency fix was deployed on June 1, 2026.”