Anoma Suspends AnomaPay Verifier, Temporarily Blocking Fund Access

Anoma suspended the verifier powering AnomaPay on Nov. 11 after the team identified a security flaw in the RISC Zero proof system, leaving users of the privacy payments application temporarily unable to access deposited funds. The company says the deposits remain safe, though access will stay blocked until an upgrade to protocol V2 is complete, a process expected to take roughly two weeks.

The suspension is a deliberate safeguard rather than a response to an observed theft. AnomaPay disclosed the issue publicly and framed the downtime as the cost of protecting user assets while the protocol change is prepared. No figure for the value of locked deposits has been disclosed, so the scale of the exposure cannot be independently assessed from the announcement alone.

Who is fixing what?

RISC Zero's team will carry out the verifier upgrade. Anoma's V2 release will integrate the security update from the proof-system provider, tying the restoration of user access directly to two dependencies: the verifier fix and the protocol migration. AnomaPay is candid on one operational point — it cannot restore access on its own, because the affected proof system sits underneath its privacy-focused payments service.

Once V2 ships, deposited funds are expected to migrate automatically, and users will not need to take any action during the migration. That promise is welcome, but it is a promise; migrations of this kind have failed or stalled elsewhere in the sector, and the two-week estimate carries no penalty clause or fallback timeline if engineering slips. In plain words, users must wait and trust the schedule.

What does this mean for users?

Deposits are frozen for the duration — the operational consequence is unambiguous. Funds cannot be moved, spent or withdrawn until the V2 upgrade completes and the automatic migration finishes. AnomaPay has stated the funds remain safe, which addresses solvency but not liquidity: a deposit that cannot be reached for two weeks is, functionally, inaccessible capital for that period.

The disclosure also leaves several questions unanswered. The nature of the security flaw in the RISC Zero proof system was not described, and it remains unclear whether the vulnerability was exploited before the suspension, whether a bounty was paid, or whether third-party auditors reviewed the patch. Absence of detail is not evidence of a problem, but it limits what outside observers can verify.

Why verifier security matters here

AnomaPay's privacy model depends on zero-knowledge proofs processed by RISC Zero's system. A flaw at the verifier layer therefore propagates upward to every application built on it, which is why Anoma acted at the protocol level rather than patching the app. The episode illustrates a structural feature of modern privacy infrastructure: applications inherit the security posture of their proof-system providers, and a single upstream flaw can halt an entire payments service.

The path forward is defined. RISC Zero upgrades the verifier, Anoma ships V2 with the integrated security update, deposits migrate automatically, and access resumes — all within an estimated two-week window that users and observers will now be watching against the calendar.