Zcash Replaces a Broken Pool With Proven Math

After a critical bug let counterfeit ZEC go undetected, the Ironwood upgrade swaps trust for machine-checked proof.

By The crypto-money Desk

In late May, Shielded Labs researcher Taylor Hornby used AI to surface a critical bug in Orchard, Zcash's largest shielded pool — a private layer where senders, recipients, and amounts stay hidden. [1] The flaw had sat in Orchard's zero-knowledge circuit since the pool launched in 2022, and in theory could have let an attacker mint counterfeit ZEC undetected. [1]

Emergency forks patched the circuit within days, but the damage wasn't fully containable. Since Orchard hides everything, nobody could prove that no fake ZEC had ever been created — and ZEC shed over half its value on the disclosure. [1]

Zcash's answer is Ironwood, a new shielded pool that reapplies the corrected Orchard circuit and its Halo 2 proving system, but with one addition: the protocol has been formally verified. [1] Multiple teams of cryptographers spent over a month producing a public Lean proof — +2,700 theorems' worth — culminating in "balance integrity," the guarantee that undetectable counterfeiting bugs cannot exist in Ironwood. [1]

The old Orchard pool is closed to new deposits, and every exit must pass Zcash's "turnstile" system, a public value-accounting checkpoint that caps outflows at what verifiably flowed in. [1] Any hypothetical counterfeits are cornered inside Orchard. At the time of writing, over 111k ZEC had migrated to Ironwood, leaving roughly 3.5M ZEC still in the old pool. [1]

Privacy and proof have long pulled against each other in cryptographic design. What makes this moment different is that the repair itself became the argument — not a patch, but a demonstration.

The next upgrade, NU7, targets faster blocks — down from 75 seconds to roughly 25 — and roughly doubles shielded capacity per block, penciling out to a ~6x throughput increase for Ironwood. [1] The coordination spanned the Zcash Foundation, the Zcash Open Development Lab, Shielded Labs, Tachyon, and beyond — with no central company steering any of it. [1]

Making privacy ubiquitous starts with making it provable, and Zcash just took its biggest step yet in that direction. [1]

Making privacy ubiquitous starts with making it provable, and Zcash just took its biggest step yet in that direction.William M. Peaster