Zcash activates Ironwood upgrade, sealing Orchard pool after undisclosed bug found

Zcash has officially launched its Ironwood (NU6.3) upgrade, sealing off the Orchard shielded pool that previously held approximately 3.66 million ZEC, and inaugurating a new private pool that starts with zero coins.

Developers address critical bug and migration process begins

The decision to retire the Orchard pool follows the discovery of a significant vulnerability in its proof circuit. Taylor Hornby, a researcher at Shielded Labs, identified the flaw on May 29, revealing that it could have permitted the creation of counterfeit ZEC tokens without leaving any trace on the blockchain. The vulnerability had been present since Orchard’s introduction in May 2022, raising concerns about the integrity of Zcash’s private pools.

Developers quickly implemented a patch for the bug within days. However, the four-year gap during which the flaw existed meant there was no way to verify whether counterfeit coins were ever produced, due to the very privacy protections shielded pools provide. The blockchain contains only cryptographic proofs of validity, not specifics about individual transactions.

To prevent any unverified ZEC from leaving Orchard, Ironwood now enforces a turnstile mechanism. This accounting safeguard ensures that withdrawals are capped at the amount verifiably deposited, effectively freezing any minted tokens that cannot be traced back to authentic inflows.

Zcash’s new turnstile mechanism ensures that the total ZEC withdrawn from Orchard cannot exceed the sum of deposits previously recorded, locking in any potential counterfeit coins that may have existed within the shielded pool.

Mini dictionary: Shielded pool (Zcash) – A private section of the Zcash blockchain where transaction amounts and participants are concealed through cryptographic proofs, making their on-chain activity anonymous.

Ironwood introduces enhanced safeguards

Ironwood marks a significant upgrade for the Zcash protocol beyond just security. Each coin moved into the new pool leaves a record built to remain recoverable even if quantum computers eventually compromise current cryptography. This “quantum-resilient” design follows specifications set under ZIP 2005 and is available from block one of Ironwood.

Additionally, Ironwood’s proof circuit is undergoing formal verification. This mathematical approach ensures the software functions correctly in all potential scenarios, rather than only in those considered during manual tests, reducing the likelihood of similar vulnerabilities going undetected in the future.

The migration’s pace depends on how rapidly users choose to move their ZEC holdings from Orchard to the new pool, with roughly 1,500 ZEC already transferred as of Tuesday, according to on-chain trackers.

Shielded pools provide privacy on the Zcash network by leveraging zero-knowledge proofs, a class of cryptographic technology allowing transaction details to remain hidden while still verifying authenticity.

Impact on Zcash supply and network monitoring

With the Ironwood activation at block 3,428,143, Orchard is now sealed. Owners must individually relocate their coins to participate in the new pool. Until user-driven migration is complete, the majority of Zcash’s private supply remains held in Orchard, with the turnstile mechanism blocking any increase to its balance.

Tracking the movement of ZEC between pools provides the community with ongoing assurance against the potential issue of counterfeit tokens. Funds crossing into or out of both pools are publicly visible, though their internal movement maintains privacy.

ZEC traded close to $463 before the upgrade, showing an 8% drop in one day and a 15% decrease across the week, though it remains significantly higher than a year ago. The key figure to monitor remains the volume of ZEC holders moving from Orchard to Ironwood, a process entirely controlled by individual owners.