ZK Security tested Zcash's formal verification framework by attempting to inject known zero-knowledge bugs into the codebase to verify they were detected