What is the proposed Ironwood upgrade for Zcash?

Ironwood is a proposed new shielded pool for Zcash designed to strengthen supply verification after a vulnerability was discovered in the existing Orchard pool. The upgrade would introduce additional audits, formal verification and a migration process intended to prevent counterfeit ZEC from entering circulation.

Why are Zcash developers proposing Ironwood?

Developers proposed Ironwood after auditors identified a flaw in the Orchard shielded pool. Although there is no evidence the vulnerability was exploited, researchers said the bug could theoretically have allowed unlimited counterfeit ZEC to be created without detection.

What was the Orchard vulnerability?

According to Shielded Labs, the vulnerability could have enabled an attacker to generate counterfeit ZEC within Orchard. Developers have already patched the flaw and stated there is currently no evidence that user funds were affected or that the circulating supply changed.

How would the Ironwood “turnstile” system work?

The proposed turnstile would act as an accounting checkpoint between the old Orchard pool and the new Ironwood pool. Funds would need to pass through this checkpoint before entering Ironwood, allowing the system to identify and reject any excess or counterfeit ZEC.

Can Ironwood prove whether counterfeit ZEC was ever created?

Not directly, but it may provide strong evidence. Shielded Labs said that if users migrate funds and no excess ZEC attempts to leave Orchard, it would suggest the vulnerability was never exploited. If excess coins appear, the turnstile would prevent them from entering the new pool.

Is Zcash (ZEC) currently safe to use?

According to the Zcash Foundation and developers, there is no evidence that user funds were compromised or that counterfeit coins entered circulation. However, the proposal highlights the importance of strengthening verification systems for privacy-focused assets.

Why did ZEC's price fall after the vulnerability disclosure?

Investors reacted negatively to reports that the flaw could theoretically have enabled unlimited counterfeit ZEC creation. The token fell from above $600 to as low as $303 before partially recovering to around $429 as concerns eased.

What does this mean for Zcash's privacy features?

The proposal does not remove Zcash's privacy functionality. Instead, it aims to strengthen the technical foundations of shielded transactions by combining privacy protections with improved supply auditing and verification mechanisms.

Image for illustrative purposes only. Not a real photo.

Zcash proposes Ironwood upgrade after Orchard bug

Written by Heidi Cuthbert Published Jun 9, 2026, 1:44 AM

Zcash developers are proposing a new shielded pool called Ironwood after a recently patched vulnerability in the Orchard privacy protocol raised concerns about the potential creation of undetected counterfeit ZEC.

The proposal, developed by the Zcash Open Development Lab in collaboration with the Zcash Foundation, Shielded Labs, Tachyon and Valar Group, would introduce formal verification and independent audits while replacing Orchard as the network’s primary shielded pool.

Under the plan, the existing Orchard pool would be closed to new deposits and internal transactions, with users required to move funds through a “turnstile” accounting mechanism before entering the new Ironwood pool.

The Zcash Foundation disclosed last week that auditors had identified a vulnerability within Orchard that could theoretically have allowed attackers to create unlimited counterfeit ZEC without detection.

Developers stressed there is no evidence that the flaw was exploited, no indication that user funds were compromised and no sign that the overall Zcash supply was affected.

According to Shielded Labs, Ironwood could also provide evidence about whether the vulnerability was ever used, because any excess ZEC attempting to leave Orchard would be rejected by the turnstile mechanism before entering the new pool.

The proposal follows a sharp market reaction to the vulnerability disclosure, which saw ZEC fall from above $600 to as low as $303 before recovering to around $429, while developers target a late July 2026 activation date for Ironwood pending testing and ecosystem review.

At the time of reporting, Zcash price was $448.20.