Shielded Labs has raised the prospect of delaying Zcash’s Ironwood network upgrade, warning that exchanges, mining pools and wallets may not have sufficient time to prepare their systems ahead of the planned late July activation.
Two Major Transitions Colliding at Once
Jason McGee, executive director of Shielded Labs, posted in the Zcash community forum that Ironwood is advancing simultaneously with a separate and demanding infrastructure overhaul. Ecosystem participants are being asked to retire zcashd, Zcash’s longstanding node and wallet software, and migrate to the Z3 stack, a new suite of tools comprising Zebra for node operation, Zaino for supplying blockchain data to applications, and Zallet for wallet functions.
McGee noted that both Zallet and Zaino remain under active development and are not yet ready for production use. Feedback from infrastructure providers indicated that some operators expect to be ready by late July, while others require additional time. McGee was clear that no delay has been formally decided.
Official Zcash guidance documents warn that operators may need to modify their systems because certain zcashd functions will have no direct replacements in the new stack.
Why Ironwood Was Proposed
Ironwood was triggered after researchers discovered an ‘infinity’ bug in Orchard, Zcash’s main private transaction pool. The flaw could theoretically have allowed an attacker to mint an unlimited number of counterfeit ZEC tokens inside the pool without detection. Developers stated there was no evidence the pool had been exploited, but Orchard’s privacy architecture makes it impossible to definitively prove no fake coins were created.
The proposed upgrade would open a replacement private pool and block all new activity in the existing Orchard pool. Any ZEC leaving Orchard would pass through an accounting checkpoint ensuring that no more ZEC exits than originally entered, giving users a means to verify that circulating supply remains within Zcash’s intended limits.
Security Reviews Ongoing
Zcash founder Zooko Wilcox said in the same community forum thread that security reviews conducted so far have found no additional serious bugs. Developers are continuing to verify the new system before Ironwood activates.
The core tension is a trade-off between quickly restoring confidence in Zcash’s shielded supply integrity and allowing enough time for exchanges, mining pools and wallet providers to safely deploy and audit the new infrastructure. A rushed rollout carries risks of its own, while further delay leaves the Orchard vulnerability unaddressed at the protocol level for longer.
