Zcash has activated its long-awaited Ironwood network upgrade, permanently retiring the Orchard shielded pool and introducing a new set of safeguards designed to prevent any potentially counterfeit ZEC from ever entering open circulation.
What Ironwood Actually Does
The Orchard pool, which held roughly 3.7 million ZEC valued at approximately $1.7 billion, has now been replaced by a fresh shielded pool. A new ‘turnstile’ accounting mechanism sits at the boundary between the two pools, enforcing a hard rule: no more ZEC can leave the old pool than was verifiably deposited into it. Any counterfeit coins that may have been quietly created through the now-patched flaw are therefore permanently trapped inside the retired pool, unable to contaminate the broader supply.
The upgrade also introduces quantum-resistant transaction records and a formally verified proof circuit, both aimed at reducing the probability of similar cryptographic vulnerabilities emerging in future.
The Bug That Started Everything
The road to Ironwood began in May when security researcher Taylor Hornby, working with Claude Opus 4.8, uncovered a four-year-old flaw in the Orchard shielded pool that could theoretically have allowed an attacker to mint counterfeit ZEC. Developers issued an emergency patch in June, but because shielded transactions deliberately conceal their details, there was no way to confirm whether the vulnerability had ever been exploited.
That uncertainty triggered a sharp 38% selloff in ZEC as investors questioned whether the coin’s total supply could still be trusted. Zcash founder Zooko Wilcox then proposed the Ironwood framework as the definitive fix, and the announcement drove a recovery of roughly $2.5 billion in market capitalisation during early June. ZEC currently trades around $464, just below an $8 billion market cap.
By July, developers had completed extensive testing while exchanges, wallets, and mining pools all prepared for the cutover.
A Privacy Warning From Critics
Not everyone views the migration as cost-free. Privacy infrastructure provider Nym raised concerns in a blog post published on Monday, arguing the transition window creates a temporary but real exposure risk for users.
‘Under normal use, your shielded ZEC transactions don’t reveal amounts to your wallet server, so your network exposure is limited. Ironwood changes that,’ Nym wrote.
Because every Zcash holder must move funds into the new pool, anyone who migrates without additional protection could inadvertently expose a link between their IP address and their wallet balance. Zcash developers have advised users not to rush the migration and recommend routing fund movements through privacy tools such as Tor or NymVPN to limit that exposure.
