diff --git a/tuic-client/src/connection/handle_task.rs b/tuic-client/src/connection/handle_task.rs
index 11519ed..8c0fa09 100644
--- a/tuic-client/src/connection/handle_task.rs
+++ b/tuic-client/src/connection/handle_task.rs
@@ -1,6 +1,7 @@
 use super::Connection;
 use crate::{error::Error, socks5::UDP_SESSIONS as SOCKS5_UDP_SESSIONS, utils::UdpRelayMode};
 use bytes::Bytes;
+use quinn::ZeroRttAccepted;
 use socks5_proto::Address as Socks5Address;
 use std::time::Duration;
 use tokio::time;
@@ -8,7 +9,12 @@ use tuic::Address;
 use tuic_quinn::{Connect, Packet};
 
 impl Connection {
-    pub async fn authenticate(self) {
+    pub async fn authenticate(self, zero_rtt_accepted: Option<ZeroRttAccepted>) {
+        if let Some(zero_rtt_accepted) = zero_rtt_accepted {
+            log::debug!("[relay] [authenticate] waiting for connection to be fully established");
+            zero_rtt_accepted.await;
+        }
+
         log::debug!("[relay] [authenticate] sending authentication");
 
         match self
diff --git a/tuic-client/src/connection/mod.rs b/tuic-client/src/connection/mod.rs
index ffc2ef0..e65e057 100644
--- a/tuic-client/src/connection/mod.rs
+++ b/tuic-client/src/connection/mod.rs
@@ -9,7 +9,7 @@ use parking_lot::Mutex;
 use quinn::{
     congestion::{BbrConfig, CubicConfig, NewRenoConfig},
     ClientConfig, Connection as QuinnConnection, Endpoint as QuinnEndpoint, EndpointConfig,
-    TokioRuntime, TransportConfig, VarInt,
+    TokioRuntime, TransportConfig, VarInt, ZeroRttAccepted,
 };
 use register_count::Counter;
 use rustls::{version, ClientConfig as RustlsClientConfig};
@@ -159,8 +159,10 @@ impl Connection {
         Ok(conn)
     }
 
+    #[allow(clippy::too_many_arguments)]
     fn new(
         conn: QuinnConnection,
+        zero_rtt_accepted: Option<ZeroRttAccepted>,
         udp_relay_mode: UdpRelayMode,
         uuid: Uuid,
         password: Arc<[u8]>,
@@ -180,15 +182,24 @@ impl Connection {
             max_concurrent_bi_streams: Arc::new(AtomicU32::new(DEFAULT_CONCURRENT_STREAMS)),
         };
 
-        tokio::spawn(conn.clone().init(heartbeat, gc_interval, gc_lifetime));
+        tokio::spawn(
+            conn.clone()
+                .init(zero_rtt_accepted, heartbeat, gc_interval, gc_lifetime),
+        );
 
         conn
     }
 
-    async fn init(self, heartbeat: Duration, gc_interval: Duration, gc_lifetime: Duration) {
+    async fn init(
+        self,
+        zero_rtt_accepted: Option<ZeroRttAccepted>,
+        heartbeat: Duration,
+        gc_interval: Duration,
+        gc_lifetime: Duration,
+    ) {
         log::info!("[relay] connection established");
 
-        tokio::spawn(self.clone().authenticate());
+        tokio::spawn(self.clone().authenticate(zero_rtt_accepted));
         tokio::spawn(self.clone().heartbeat(heartbeat));
         tokio::spawn(self.clone().collect_garbage(gc_interval, gc_lifetime));
 
@@ -270,22 +281,23 @@ impl Endpoint {
                 }
 
                 let conn = self.ep.connect(addr, self.server.server_name())?;
-                let conn = if self.zero_rtt_handshake {
+                let (conn, zero_rtt_accepted) = if self.zero_rtt_handshake {
                     match conn.into_0rtt() {
-                        Ok((conn, _)) => conn,
-                        Err(conn) => conn.await?,
+                        Ok((conn, zero_rtt_accepted)) => (conn, Some(zero_rtt_accepted)),
+                        Err(conn) => (conn.await?, None),
                     }
                 } else {
-                    conn.await?
+                    (conn.await?, None)
                 };
 
-                Ok(conn)
+                Ok((conn, zero_rtt_accepted))
             };
 
             match connect_to.await {
-                Ok(conn) => {
+                Ok((conn, zero_rtt_accepted)) => {
                     return Ok(Connection::new(
                         conn,
+                        zero_rtt_accepted,
                         self.udp_relay_mode,
                         self.uuid,
                         self.password.clone(),