{"id":35786,"date":"2026-07-29T11:28:23","date_gmt":"2026-07-29T11:28:23","guid":{"rendered":"https:\/\/bitunikey.com\/news\/zcash-ironwood-upgrade-whats-changed-after-the-orchard-bug\/"},"modified":"2026-07-29T11:28:42","modified_gmt":"2026-07-29T11:28:42","slug":"zcash-ironwood-upgrade-whats-changed-after-the-orchard-bug","status":"publish","type":"post","link":"https:\/\/bitunikey.com\/news\/zcash-ironwood-upgrade-whats-changed-after-the-orchard-bug\/","title":{"rendered":"Zcash Ironwood upgrade: What\u2019s changed after the Orchard bug?"},"content":{"rendered":"<p><\/p>\n<div class=\"post-detail__content blocks\">\n<p class=\"is-style-lead\">Zcash has completed its Ironwood network upgrade, replacing its vulnerable Orchard shielded pool with a formally verified alternative designed to prevent undetectable counterfeiting while beginning the migration of shielded funds into the new pool.<\/p>\n<div id=\"cn-block-summary-block_23ea45ec43443c0cdefc709abd0b03e6\" class=\"cn-block-summary\">\n<div class=\"cn-block-summary__nav tabs\">\n        <span class=\"tabs__item is-selected\">Summary<\/span>\n    <\/div>\n<div class=\"cn-block-summary__content\">\n<ul class=\"wp-block-list\">\n<li>Zcash has activated the Ironwood upgrade and replaced Orchard with a new formally verified shielded pool.<\/li>\n<li>Ironwood adds new supply safeguards while Orchard now supports only fund withdrawals.<\/li>\n<li>Researchers completed a machine checked proof confirming Ironwood cannot create undetectable counterfeit ZEC under its design assumptions.<\/li>\n<li>More than 40,000 ZEC have already moved to Ironwood while about 3.6 million ZEC remain in Orchard.<\/li>\n<\/ul><\/div>\n<\/div>\n<p><!-- .cn-block-summary --><\/p>\n<p>According to Project Tachyon and the Zcash development team, Ironwood activated as scheduled at block height 3,428,143 through the NU6.3 network upgrade on Tuesday, introducing a new shielded pool that developers say restores confidence in Zcash\u2019s supply integrity after concerns surrounding Orchard.\u00a0<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Zcash&#8217;s biggest network upgrade in years is now live<\/p>\n<p>Ironwood brings:<br \/>\u2013 A new Ironwood shielded pool<br \/>\u2013 Stronger security guarantees for shielded transactions<br \/>\u2013 Independently verifiable supply integrity<br \/>\u2013 Privacy remains protected<br \/>\u2013 A stronger foundation for the Zcash network<\/p>\n<p>At\u2026 <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/t.co\/NK13aDnvbk\">https:\/\/t.co\/NK13aDnvbk<\/a><\/p>\n<p>\u2014 Gemini (@Gemini) <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/x.com\/Gemini\/status\/2082192509384487080?ref_src=twsrc%5Etfw\">July 28, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The activation followed months of work across multiple Zcash organizations after researchers disclosed a flaw that could theoretically have enabled counterfeit ZEC to be created without public detection.<\/p>\n<p>While Ironwood is now active, Orchard has entered an exit-only phase. Users can still withdraw funds from the older shielded pool at their discretion, but it no longer accepts new shielded activity. Data from Zcash\u2019s migration tracker shows roughly 40,207 ZEC have already moved into Ironwood, while nearly 3.6 million ZEC remain inside Orchard awaiting migration.<\/p>\n<p>ZEC (ZEC) briefly fell about 9% to around $460 after the upgrade before recovering to roughly $475, according to the crypto.news price page. The token had already experienced significant volatility after the Orchard vulnerability became public, losing more than half of its value before later rebounding from about $45 in September last year to nearly $700 by year-end.<\/p>\n<h2 class=\"wp-block-heading\">Ironwood adds a new accounting boundary<\/h2>\n<p>The new shielded pool replaces Orchard after researchers identified what became known as the Orchard \u201cinfinity\u201d bug. According to Shielded Labs, researcher Taylor Hornby discovered the flaw in late May inside Orchard\u2019s zero-knowledge circuit. Developers said the issue could theoretically have allowed an attacker to mint counterfeit ZEC without immediate detection, although they also stated they found no evidence the vulnerability had ever been exploited.<\/p>\n<p>Emergency upgrades in early June temporarily disabled Orchard before developers deployed corrected circuit code through the NU6.2 hard fork. Even after patching the flaw, developers said Zcash\u2019s privacy model prevented anyone from proving with certainty that hidden inflation had never occurred, prompting work on a replacement shielded pool instead of relying solely on the patched Orchard implementation.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<p>Ironwood introduces a separate accounting system with its own note commitment tree, nullifier set, and chain value pool, allowing nodes to track the new shielded pool independently. According to the project\u2019s technical documentation, the upgrade also installs a public accounting checkpoint known as a turnstile, allowing funds to leave Orchard while preventing more value from exiting than was legitimately entered into the older pool.<\/p>\n<p>Developers have said the mechanism is intended to trap any hypothetical counterfeit coins inside Orchard while allowing independent verification that Zcash\u2019s circulating supply continues to respect the network\u2019s 21 million ZEC issuance limit.<\/p>\n<h2 class=\"wp-block-heading\">Formal verification has strengthened Ironwood\u2019s security model<\/h2>\n<p>Alongside the network activation, Project Tachyon announced that researchers completed a machine-checked mathematical proof covering Ironwood\u2019s balance integrity, providing additional assurance that the new shielded pool cannot create value beyond what has publicly entered it under its stated cryptographic assumptions.<\/p>\n<p>According to Project Tachyon, the proof was <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/tachyon.z.cash\/blog\/ironwood-verification-complete\/\" target=\"_blank\" rel=\"nofollow\">written<\/a> in the Lean programming language and consists of more than 2,700 theorems developed over more than a month by three teams of researchers and cryptographers.<\/p>\n<p>The researchers said their work formally verifies the components required for balance integrity, including Ironwood\u2019s zero-knowledge proof system, circuit rules and ledger-level accounting. They also clarified that the verification does not extend to Ironwood\u2019s separate privacy guarantees.<\/p>\n<p>Commenting on the work, Zcash co-founder Sean Bowe said the cross-team effort eliminated sources of undetectable counterfeiting bugs from the new Ironwood protocol.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Soundness of our zk-SNARK would have been great on its own. But a cross-team collaboration has just changed Zcash&#8217;s history forever, eliminating all sources of undetectable counterfeiting bugs from the new Ironwood protocol. <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/t.co\/BUciBdzUJV\">https:\/\/t.co\/BUciBdzUJV<\/a><\/p>\n<p>\u2014 Sean Bowe (@ebfull) <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/x.com\/ebfull\/status\/2082104977196270052?ref_src=twsrc%5Etfw\">July 28, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The new shielded pool also incorporates ZIP 2005 quantum-recoverable notes, allowing a future recovery mechanism if advances in quantum computing eventually weaken current cryptographic protections. According to the ZIP specification, the feature does not make present-day Zcash transactions quantum secure because a separate recovery protocol would still need to be designed and activated in the future.<\/p>\n<h2 class=\"wp-block-heading\">Ecosystem teams coordinated the rollout<\/h2>\n<p>Ironwood was developed through collaboration between Shielded Labs, the Zcash Open Development Lab (ZODL), Project Tachyon, Valar Group and the Zcash Foundation.<\/p>\n<p>Shielded Labs, co-founded by Zcash founder Zooko Wilcox, initially proposed replacing Orchard to restore verifiable supply accounting after the vulnerability became public.<\/p>\n<p>Meanwhile, ZODL Executive Director Josh Swihart said on X that engineers from his organization contributed 82% of the merged changes across Zcash\u2019s protocol and wallet repositories during the Orchard replacement effort. Swihart added that Orchard had been patched within five days before developers completed the replacement process in about 60 days.<\/p>\n<p>The NU6.3 upgrade also completes another long-planned transition across the network. According to the Zcash Foundation, the older zcashd node software no longer supports the new consensus rules, making Zebra the required node implementation after activation.<\/p>\n<p>Before Ironwood reached the network, Shielded Labs Executive Director Jason McGee had warned that exchanges, wallet providers and mining pools were simultaneously preparing to migrate from zcashd to the new Z3 software stack while also upgrading for Ironwood. McGee said some infrastructure operators needed additional time, although no decision was ultimately made to postpone the network upgrade.<\/p>\n<p>With Ironwood now live and the Orchard migration underway, the focus has shifted to moving remaining shielded funds through the turnstile while the network gradually retires the older pool under the new accounting model.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Zcash has completed its Ironwood network upgrade, replacing its vulnerable Orchard shielded pool with a formally verified alternative designed to prevent undetectable counterfeiting while beginning the migration of shielded funds&hellip;<\/p>\n","protected":false},"author":1,"featured_media":32513,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35786","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/35786","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=35786"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/35786\/revisions"}],"predecessor-version":[{"id":35787,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/35786\/revisions\/35787"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/32513"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=35786"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=35786"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=35786"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}