Firo Frontier · August 20

Spark Vulnerability Mitigated - Your Wallet and Keys Are Safe

A vulnerability in the Spark protocol was responsibly disclosed and has been mitigated. Here is what you need to know:

• Your wallet and private keys are safe. This is not a key-theft or wallet-compromise bug.

• The vulnerability affects multi-input Spark spends only. Single-input spends are unaffected.

• Under specific conditions, an attacker could forge Spark coins in multi-input transactions (a supply-integrity issue). We found no evidence of inflation beyond a small controlled amount used by the researcher to validate the finding.

• As a mitigation, multi-input Spark spends have been temporarily disabled.

Please upgrade to v0.14.17.2 immediately. A follow-up hard fork (v0.14.18.0) is targeted for the 3rd week of August 2026 and will re-enable full multi-input Spark spends. To protect your privacy, we recommend waiting until v0.14.18.0 before making Spark spends.

Please stay tuned for v0.14.18.0 release announcement.

The fix was developed with CypherStack and reviewed by HashCloak. Full technical details will be published after the hard fork activates.

Read the full disclosure here

First Firo Transfer Over Rosen Bridge

The first FIRO transfer over the Rosen Bridge has been made. This is a major milestone on the path to rsFIRO being live on Uniswap, PancakeSwap, and major DeFi ecosystems. More updates to follow as the rollout progresses.

See the post here

5th Term Community Fund Committee Formed

The 5th term Community Fund Committee (CFC) has been confirmed. The following community members will serve for one year starting September 2026:

rottenwheel, nrsimha, Jagmo (jh_ride), Firofan, ddadybayo, vaselexa (centaurea), and Thorfried.

Welcome to returning members and a warm welcome to the newest additions. Thank you to the outgoing committee for their service.

Read the announcement here

Other News

• A Barbershop in Syria Now Accepts FIRO

Real-world adoption continues - a men's barbershop in Syria is now accepting FIRO as a payment method. Another everyday merchant joining the growing list of businesses embracing financial privacy.

See the post here

• BTCVPS Now Accepts FIRO

BTCVPS now accepts FIRO as payment for anonymous VPS hosting. Plans start from €6/month in Netherlands and Lithuania.

Read more here

• Venezuela Earthquake Relief Fund - Still Ongoing

The relief fund set up by community member rottenwheel for those affected by the June 24th earthquakes in Venezuela is still active. Medicines, tools, and rescue gear are being delivered directly on the ground by nurses in Caracas. If you are able to help, please consider contributing.

Support the fund here

• Firo Syria: 90th Educational Session

The Firo Syria community has reached their 90th introductory and educational session on Firo and Stack Wallet. Session after session, they continue to spread financial privacy knowledge on the ground. An incredible effort from a dedicated community.

See the post here

Firo Ecosystem

• buyfiro.app - Swap any EVM token straight to FIRO in seconds. No KYC, Spark address supported, 2% fee goes toward liquidity. You can also bridge your FIRO to rsFIRO (ETH) and back. Built by community member @vsnation_.

• AnonBazaar.com - A Craigslist-style P2P marketplace for privacy coins. 8,000+ listings, no KYC, pay and get paid in FIRO via Spark address. Learn more here

• SHKeeper - A self-hosted, open-source payment gateway for businesses to accept FIRO directly to their own wallet. No intermediaries, no third-party fees. Learn more here

Did you know?

• More information about Firo is available at: https://firo.org

• The Firo Telegram news channel is: https://t.me/fironews

• Archive copies of previous Firo Frontier Newsletters can be found at: https://newsletter.firo.org/archive