Hassan Maishera
TL;DR
-
Zcash has successfully activated the Ironwood network upgrade, introducing a new shielded privacy pool.
-
The upgrade follows the discovery of a vulnerability in the Orchard pool that could have theoretically enabled undetectable counterfeit ZEC.
-
Orchard will now only support withdrawals, while users migrate funds to Ironwood.
Privacy-focused cryptocurrency Zcash (ZEC) activated its highly anticipated Ironwood network upgrade on Tuesday, replacing the Orchard shielded pool with a more secure, formally verified alternative following concerns over a critical vulnerability discovered earlier this year.
The NU6.3 upgrade went live as scheduled at block height 3,428,143, introducing the new Ironwood shielded pool while limiting Orchard to withdrawal-only functionality during the migration period.
Users Begin Migrating from Orchard to Ironwood
Orchard had served as Zcash's primary privacy pool since its launch in 2022, accounting for nearly 88% of the blockchain's shielded ZEC supply at its peak. The remaining shielded coins were held in the older Sapling and Sprout pools.
Migration to Ironwood is already underway. According to the network's migration tracker, more than 40,000 ZEC have moved into the new pool, while approximately 3.6 million ZEC remain in Orchard awaiting transfer.
Although withdrawals from Orchard remain optional, the pool will no longer process new shielded transactions.
The upgrade follows the discovery of a vulnerability in Orchard by Shielded Labs researcher Taylor Hornby in late May.
The flaw affected Orchard's zero-knowledge proof circuit and could have theoretically allowed an attacker to create counterfeit ZEC without detection.
Despite the severity of the issue, blockchain analysts and developers said they found no evidence that the vulnerability was ever exploited. Nevertheless, Zcash developers moved quickly to eliminate the risk by patching Orchard and designing a more mathematically secure replacement.
An emergency soft fork temporarily disabled Orchard activity on June 2, followed by a hard fork the next day that deployed corrected circuit code while work on Ironwood continued.
Ironwood Undergoes Formal Verification
Unlike its predecessor, Ironwood has been formally verified, providing stronger mathematical guarantees that the protocol behaves correctly under all possible conditions.
The new shielded pool builds on Orchard's corrected cryptographic circuit and continues using the Halo 2 zero-knowledge proof system with additional security enhancements.
According to Zcash co-founder Sean Bowe, the collaborative effort significantly improves the network's long-term security.
He said the cross-team initiative eliminated potential sources of undetectable counterfeiting bugs within the new Ironwood protocol, marking a major milestone for the privacy blockchain.
Development of Ironwood involved contributors from across the Zcash ecosystem, including the Zcash Open Development Lab (ZODL), Project Tachyon, Valar Group, the Zcash Foundation, and Shielded Labs.
Shielded Labs, co-founded by renowned cryptographer Zooko Wilcox, proposed the initiative to restore full supply verifiability following the Orchard disclosure.
According to ZODL Executive Director Josh Swihart, the organization's engineers were responsible for 82% of the merged protocol and wallet code changes required for the Orchard fix and Ironwood migration.
Swihart highlighted the speed of the response, noting that Orchard was patched within five days and replaced with Ironwood in approximately 60 days.
Beyond improving privacy and security, Ironwood introduces several new features designed to strengthen confidence in Zcash's monetary policy.
The upgrade implements quantum-recoverable notes under ZIP 2005, creating a potential recovery mechanism should future advances in quantum computing weaken current cryptographic protections.
Ironwood also introduces a "turnstile" mechanism that limits the amount of ZEC leaving the Orchard pool while enabling independent verification of the blockchain's circulating supply.
The feature helps confirm that the previously disclosed vulnerability did not compromise Zcash's fixed maximum supply of 21 million ZEC, reinforcing transparency and trust in the network.
