If you have funds deposited through AnomaPay, a November 11, 2026 report concerns temporary access rather than a claim that those deposits were lost.
Odaily Planet Daily reported that day, citing AnomaPay’s monitoring, that an external security vulnerability had been found in the RISC Zero proof system AnomaPay uses. The vulnerability may endanger user funds. To protect funds, the risc0 verifier behind Anoma was paused. A later upgrade is to be carried out by the RISC Zero team.
AnomaPay said funds users had already deposited are safe. Those funds are temporarily inaccessible until the Anoma protocol is upgraded to a V2 version that includes RISC Zero’s new security update. The upgrade is expected to take about two weeks. Users do not need to do anything. After the upgrade, funds are to be migrated automatically to V2 and access restored.
The stated trade-off is accessibility against the integrity of the proof system: access is suspended for the expected upgrade window so a reported vulnerability can be addressed, while AnomaPay describes the deposited funds as remaining safe. The notice does not describe a confidentiality breach, and it does not ask users to create or reveal backups. It also does not say the pause removes every risk—only that no user action is required and that restoration depends on the planned V2 migration.
Original report: Odaily Planet Daily, published November 11, 2026, 17:44 +08:00.
