What changed, and why it matters
This is a tiny build-fix commit for a special feature flag called 'cypherpunk'. It changes the default Rust feature set used by developers and adds a missing 'Vec' import for Zcash code. There is nothing in the diff that alters how user funds, keys, or transactions are handled, and no security problem is visible.
No security action required. Treat as a normal build/maintenance commit. If reviewing the broader cypherpunk feature, verify it in a separate audit of that feature branch rather than from this two-line build fix.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adjusts two files: (1) rust/rust_c/Cargo.toml switches the default Cargo feature from ‘simulator-multi-coins’ to ‘debug-cypherpunk’, and (2) rust/rust_c/src/zcash/mod.rs adds ‘vec::Vec’ to the alloc imports so the cypherpunk build compiles. The diff is purely compilation/configuration housekeeping. No cryptographic, parsing, memory-safety, or transaction-handling logic is modified.
Changed components
rust/rust_c/Cargo.toml default feature selectionrust/rust_c/src/zcash/mod.rs alloc importsInspect captured patch +2 / −2
diff --git a/rust/rust_c/Cargo.toml b/rust/rust_c/Cargo.toml
index ac3512f..f4259af 100644
--- a/rust/rust_c/Cargo.toml
+++ b/rust/rust_c/Cargo.toml
@@ -136,7 +136,7 @@ simulator-multi-coins = ["simulator", "multi-coins"]
simulator-btc-only = ["simulator", "btc-only"]
simulator-cypherpunk = ["simulator", "cypherpunk"]
# make IDE happy
-default = ["simulator-multi-coins"]
+default = ["debug-cypherpunk"]
[dev-dependencies]
keystore = { path = "../keystore" }
diff --git a/rust/rust_c/src/zcash/mod.rs b/rust/rust_c/src/zcash/mod.rs
index c79ff52..dd58d83 100644
--- a/rust/rust_c/src/zcash/mod.rs
+++ b/rust/rust_c/src/zcash/mod.rs
@@ -10,7 +10,7 @@ use crate::common::{
};
use crate::{extract_array, extract_array_mut};
use crate::{extract_ptr_with_type, make_free_method};
-use alloc::{boxed::Box, format, string::String, string::ToString};
+use alloc::{boxed::Box, format, string::String, string::ToString, vec::Vec};
use app_zcash::get_address;
use core::slice;
use cryptoxide::hashing::sha256;
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.