This proposal calls for a network-wide version update across the Zera Network following a recent cyberattack. An investigation into the incident identified a security vulnerability, resulting in a Common Vulnerabilities and Exposures (CVE) submission for the zera-os repository, with a critical severity score of 9.1.
To address the identified vulnerability, passage of this governance proposal will execute a required network version upgrade to Network Runtime v1.0.7.
A vote in favor approves the proposed security update to address the identified vulnerability and improve the security and stability of the ZERA Network.
It is generally understood within the community that the conduct of the IC marketing group has targeted developer groups, contributing to a cascading effect in which development teams have reduced their involvement or withdrawn from the Zera Network. This has weakened the ZERA ecosystem and created significant long-term risks to its security and sustainability.
Operating a network without an active development community presents serious security concerns, particularly as advancements in artificial intelligence make identifying and exploiting vulnerabilities increasingly accessible. These risks are amplified when there is no active development community proactively identifying, addressing, and defending against emerging threats.
Something needs to change. The loss of developers, lack of meaningful network adoption, and failure to foster a productive environment cannot be ignored. In the proposer’s opinion, unless the community addresses the conduct that has driven active communities away and takes meaningful steps to rebuild development participation and network usage, future security incidents are increasingly likely.
Attempt 2 — Governance Reality Check
This is not the first attempt to address this critical issue. A previous proposal received exactly zero participation. Nobody voted. That outcome is not an anomaly; it is a clear demonstration that the current governance system is broken and that the broader community does not care enough to engage when critical security and sustainability are on the line. A network that cannot generate basic participation for its own survival cannot claim to be governed. The system is not working.
A version upgrade may address the immediate vulnerability, but it does not resolve the underlying risks associated with a declining ecosystem and inactive governance. The long-term security and sustainability of the ZERA Network depend on a community that supports, rather than discourages, those willing to build.
In parallel, a separate proposal is being advanced to shut down the bridge. Oracles and cross-chain infrastructure of this type become unacceptably dangerous when there is no active development community monitoring, maintaining, and responding to threats. Leaving them live under current conditions multiplies risk without corresponding benefit.