The Zcash blockchain is expected to activate its Ironwood network upgrade at block height 3,428,143, scheduled for July 28 at approximately 12:00 p.m. UTC. This upgrade, known as NU6.3, aims to address a significant security vulnerability while enhancing the transparency and soundness of Zcash’s circulating supply.
Ironwood’s objectives and background
Ironwood was developed in response to a counterfeiting vulnerability discovered in the Zcash Orchard shielded pool. Taylor Hornby, a security researcher at Shielded Labs, identified the flaw, prompting an emergency patch implemented by the Zcash Open Development Lab (ZODL). ZODL stated that the vulnerability had not been exploited before it was fixed.
Zcash is a privacy-focused cryptocurrency that allows users to make shielded transactions, hiding details such as addresses and amounts. The project has focused on enhancing security around its shielded pools to prevent risks like the creation of counterfeit coins.
Because transaction data in Orchard is private, users previously could not independently ensure that the shielded pool avoided counterfeit ZEC creation. Ironwood introduces new mechanisms to address this limitation by deprecating the compromised shielded pool and replacing it with a new pool using a corrected circuit.
Mini dictionary: Zcash Open Development Lab (ZODL) — A core entity responsible for technical development and security of the Zcash protocol, including emergency upgrades and research-driven improvements.
Impact on users and transactions
Following the Ironwood upgrade, users will not be able to send or receive ZEC within the original Orchard pool. Instead, only exits through Zcash’s existing “turnstile” mechanism are allowed, ensuring that the pool cannot output more ZEC than had been deposited. This design is intended to block the withdrawal of any hypothetically counterfeit coins that might have been created before the vulnerability was patched.
The upgrade will seal the old Orchard pool and launch a new one using the corrected protocol. As a result, users holding funds in the original pool will need to use the turnstile to transfer assets out. The turnstile acts as a safeguard, upholding network supply integrity.
| Feature | Old Orchard Pool | New Pool (Ironwood) |
|---|---|---|
| Transaction Activity | Allowed | Allowed |
| Sending/Receiving ZEC | Stopped after upgrade | Active |
| Exiting Funds | Via turnstile only | Standard shielded transactions |
| Counterfeit Risk | Potentially present (before fix) | Mitigated (corrected circuit) |
Network integrity and service considerations
Ironwood introduces independently verifiable soundness, enabling anyone running a Zcash node to directly check that protocol supply limits are enforced. This commitment to transparency marks a notable technical development for Zcash compared to earlier privacy-first designs without external validation.
The Zcash community and users are advised to anticipate potential temporary service interruptions as major exchanges, wallets, and service providers complete their preparations. During the transition, deposits and withdrawals could be suspended if infrastructure is not immediately ready for the Ironwood changes.
Following the Ironwood upgrade, anyone running a node will be able to independently verify that Zcash supply limits are being enforced, marking a shift in network transparency and integrity.
