Zcash proposes Ironwood upgrade to tighten ZEC supply checks after Orchard flaw

Traders Union
All News
Crypto
Zcash Ironwood upgrade proposal

Highlights

Zcash proposes the Ironwood upgrade developed with Tachyon, Valar Group, Zcash Foundation, and Shielded Labs to enforce stricter supply checks after a flaw in the Orchard protocol.
The Orchard pool will close to new deposits, with all withdrawals passing through a turnstile to prevent counterfeit ZEC from entering the Ironwood protocol.
ZEC trades at $429 after dropping from above $600 to $303 on Friday following the vulnerability disclosure, highlighting market concern over protocol security.

Upgrade plan and verification changes

According to Cointelegraph, the proposed network upgrade is being developed with Tachyon, Valar Group, the Zcash Foundation and Shielded Labs to add formal verification and independent audits to the Orchard protocol, Zcash's privacy system for shielded transactions.

Under the proposal, the current Orchard pool would close to new deposits and internal transactions. Funds leaving Orchard would need to pass through a turnstile, which acts as an accounting checkpoint before assets can enter Ironwood.

The Zcash Foundation said auditors identified the vulnerability in the Orchard shielded pool, while developers said they have found no evidence that user funds were affected or that Zcash's total supply changed. Shielded Labs said the flaw could have allowed attackers to create an unlimited amount of counterfeit ZEC inside Orchard without detection.

Market reaction and implications for ZEC holders

Shielded Labs said in a separate X post that Ironwood may provide evidence on whether the Orchard bug was ever exploited, although the proposal does not depend on proving that point retroactively. If users migrate from Orchard to Ironwood and no excess ZEC attempts to exit the old pool, that would be strong evidence the flaw was not used, it said.

If excess ZEC does attempt to leave Orchard, the turnstile would reject it, preventing counterfeit coins from entering the wider supply. That mechanism has become central to debate in the Zcash community, with some users questioning how the network can show the bug was not exploited, while others argue that deprecating Orchard effectively contains any potential excess coins.

David Schwartz, Ripple's former chief technology officer, said on X that users would remain safe whether or not they move their coins if no exploit occurred. ZEC trades at $429 at the time of writing, after falling as low as $303 from above $600 when traders reacted to the vulnerability disclosure on Friday, according to CoinGecko.

Our earlier article on Bitcoin-collateralized mortgages in the U.S. explained how Coinbase helped originate the first Fannie Mae-backed home loan using BTC as collateral, signaling deeper integration between crypto and traditional lending. We also noted that the rollout is continuing despite Bitcoin’s recent price weakness, with a broader launch planned for average Americans—highlighting how new crypto-linked products can expand access while adding new risk considerations for users and institutions.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.