zcash had an infinite mint bug in its orchard shielded pool for 4 years. anthropic's claude found it. no human auditor caught it. trail of bits, NCC group, ABDK all missed it because the bug lived in zk circuit constraints, not application logic. zcash disclosed transparently, ironwood upgrade with mandatory formal verification targeting Q3 2026. here's the part worth watching. anthropic's project glasswing just added monero to the audit queue. if bulletproofs or RingCT have a similar flaw, monero has no electric coin company to coordinate an emergency upgrade. decentralized governance is a feature until you need to patch an infinite mint in 72 hours