I had never considered this as a challenge for privacy coins...
> exploit went unnoticed for years
> could freely mint new zcash:native freely
> could sell those tokens while masking where it came from (!)
> no way of knowing if this already happened or not (!!)