Privacy Focused Zcash (ZEC) Launches Ironwood Upgrade Following Orchard Security Vulnerability
Privacy-focused Zcash has activated its Ironwood network upgrade, introducing a new shielded pool in response to a soundness flaw previously identified in the Orchard protocol. The upgrade, formally designated NU6.3, went live on July 28, 2026, at block height 3,428,143.
It establishes a fresh shielded value pool also named Ironwood while limiting the older Orchard pool primarily to withdrawals.
New deposits and internal transfers within Orchard are no longer permitted. Funds departing Orchard must pass through the protocol’s existing turnstile mechanism before entering the new pool.
This accounting checkpoint ensures that the amount exiting cannot exceed the quantity verifiably deposited, creating an independently checkable boundary on circulating supply.
The development followed the late-May 2026 discovery of a critical soundness vulnerability in Orchard’s zero-knowledge circuit by independent researcher Taylor Hornby during security analysis supported by Shielded Labs.
The issue resided in the elliptic-curve components of the Halo 2 proving system used for Orchard transactions and could theoretically have permitted the undetectable creation of counterfeit notes inside the private pool.
Because Orchard transactions conceal amounts and participants, cryptographic methods alone could not definitively confirm whether the flaw had been exploited prior to remediation.
No evidence of exploitation, impact on user funds, or inflation of the total ZEC supply has been reported.
Developers responded swiftly. An emergency soft-fork measure temporarily restricted Orchard activity, followed by the NU6.2 hard fork that corrected the underlying circuit and restored functionality.
Ironwood then provided a longer-term structural solution.
The new pool reuses a patched version of the Orchard protocol with separate note commitment trees, nullifier sets, value pools, and transaction history.
It incorporates formal verification, independent audits, and additional assurance measures aimed at reducing the risk of further undetectable soundness issues.
The upgrade also implements quantum-recoverable notes under relevant ZIP specifications, offering a potential recovery path should future advances in quantum computing affect current cryptography.
Orchard had become Zcash’s dominant shielded pool, at one point accounting for a large majority of private holdings. At activation, roughly 3.6 million ZEC remained there, while early migration figures showed tens of thousands of tokens already moving into Ironwood.
— Zcash Open Development Lab (@zodl_co) July 28, 2026
Compatible wallets continue to support existing addresses and receiver structures, automatically routing new shielded payments to the Ironwood pool where possible.
Users holding Orchard balances are encouraged to migrate via updated software; the process is designed to be relatively straightforward, though full voluntary transfer will determine how quickly the private supply consolidates in the new pool.
Node operators must run software supporting NU6.3 to remain on the main chain.Ironwood represents coordinated work across the Zcash ecosystem, including contributions from the Zcash Open Development Lab, Shielded Labs, Project Tachyon, the Zcash Foundation, and others.
By sealing the prior pool and enforcing turnstile accounting, the upgrade restores users’ ability to independently verify that circulating ZEC respects the protocol’s supply rules without relying solely on assessments of past exploitation likelihood. The change preserves Zcash’s core privacy model while strengthening long-term confidence in monetary integrity.
