For users holding funds in AnomaPay, the immediate concern is access: deposits are temporarily unavailable, though AnomaPay says they remain safe.
In a report published November 11, 2026, at 17:44 (UTC+8), Odaily said AnomaPay had identified an external security vulnerability in the RISC Zero proving system it uses. The vulnerability could put user funds at risk. The risc0 verifier behind Anoma has been paused, and the RISC Zero team is expected to upgrade it.
According to AnomaPay, users do not need to take action. Access is expected to return after Anoma upgrades to V2 with RISC Zero’s security update, a process estimated to take about two weeks. AnomaPay says deposited funds will then migrate automatically to V2. The safety of those funds and the upgrade timeline are AnomaPay’s statements, not independently confirmed outcomes in the report.