A security researcher uncovered a four-year-old flaw in Zcash's Orchard pool using AI, risking unlimited counterfeit tokens; a rapid soft and hard fork fixed it.