Zcash Proposes Ironwood Shielded Pool Upgrade Following Orchard Vulnerability
New turnstile mechanism aims to prevent potential counterfeit ZEC while providing evidence on whether the bug was exploited
L'essentiel
- Zcash developers are proposing a new shielded pool called Ironwood that would close the current Orchard pool to new deposits and introduce a turnstile checkpoint.
- The move follows the discovery of a vulnerability that could have allowed infinite counterfeit ZEC creation, though no evidence of exploitation or supply change has been found.
Résumé généré par IA
Pourquoi c'est important
A vulnerability was discovered in Zcash's Orchard shielded pool that could have allowed the creation of unlimited counterfeit ZEC. No evidence of exploitation or change in total supply has been found. The proposed Ironwood upgrade would close the current Orchard pool to new activity and require funds to pass through a turnstile checkpoint before entering the new pool.
Zcash developers are proposing a new shielded pool called Ironwood after a recently patched bug raised concerns about whether counterfeit ZEC could have entered circulation unnoticed.
The Zcash Open Development Lab (ZODL) said Saturday that it is working with Tachyon, Valar Group, the Zcash Foundation and Shielded Labs on the proposed network upgrade, which would add formal verification and independent audits to the Orchard protocol, a privacy system that lets users move ZEC without revealing transaction details.
The proposal would close the current Orchard pool to new deposits and internal transactions, requiring funds to pass through a “turnstile,” which serves as an accounting checkpoint, before entering Ironwood.
The Zcash Foundation said Wednesday that auditors discovered a vulnerability in the Orchard shielded pool. Developers said there was no evidence that user funds were affected or that Zcash's total supply changed.
Auditors at Shielded Labs said the vulnerability could have allowed attackers to create an infinite amount of counterfeit ZEC within Orchard without detection.
Ironwood could show whether counterfeit ZEC existed.
In a separate X post, Shielded Labs said Ironwood may produce evidence about whether the Orchard bug was ever exploited, though the proposal does not depend on proving the issue retroactively.
If users migrate from Orchard to Ironwood and no excess ZEC tries to leave the old pool, that would be strong evidence that the vulnerability was never exploited, Shielded Labs said. If excess ZEC tries to leave, the turnstile would reject it, effectively preventing counterfeit coins from entering the supply.
The distinction has been a source of discussion among community members. Some questioned whether Zcash can prove the bug was not exploited without implying some kind of backdoor. Others argued that if Orchard is deprecated and funds can only leave through a turnstile, any excess coins would be trapped even if they existed.
David Schwartz, Ripple’s former chief technology officer, said on X that if there were no exploits, users would remain safe whether or not they move their coins. He said users who stay in the pool may be “lonely” there, but their funds would remain safe and accessible.
ZEC traded at $429 at the time of writing. It fell as low as $303 from above $600 when traders reacted to the vulnerability disclosure on Friday, according to CoinGecko.
ZODL said it plans to target Ironwood activation for late July 2026, pending testing, review and coordination across the Zcash ecosystem.
À surveiller
Perspective IA — des possibilités, pas des certitudes
ZEC price will likely experience continued volatility until the Ironwood upgrade is successfully activated and community confidence is restored.
Probable · En quelques semaines
Most users will migrate funds from Orchard to Ironwood, providing evidence that the vulnerability was not exploited if no excess ZEC attempts to exit the old pool.
Probable · En quelques mois
Questions ouvertes
- Was the Orchard vulnerability actually exploited before it was patched?
- How many users will choose to migrate their funds to Ironwood versus remaining in Orchard?
- What will be the final technical specifications and audit requirements for the Ironwood upgrade?
- How will the community respond to the turnstile mechanism and potential trapping of excess coins?
