Key Takeaways
Ironwood (NU6.3) seals Zcash’s outdated Orchard pool at block 3,428,143 on July 28.Taylor Hornby’s Could bug discover pushed ZEC decrease earlier than it stabilized above $500.Sean Bowe and Dev Ojha’s Zakura node syncs Zcash 5 instances sooner than Zebra.
The Ironwood arduous fork, often called NU6.3, prompts round July 28, 2026, at block top 3,428,143. It closes a soundness flaw within the Orchard shielded pool and opens a brand new pool constructed on corrected code. Alongside it, a quick new node referred to as Zakura is already stay, giving operators a sooner method to run the community.
A Bug No person Might See
Safety researcher Taylor Hornby, working with Shielded Labs, discovered the flaw in late Could 2026. The bug sat inside Orchard’s cryptographic circuits. In concept, it lets somebody mint counterfeit ZEC contained in the shielded pool with out leaving a hint. Zcash’s privateness design, the identical function that protects customers, additionally blocks exterior observers from checking whether or not anybody has exploited it.
Builders moved quick. A tender fork shut down the Orchard pool quickly. A tough fork, NU6.2, patched the instant hazard. ZEC’s value dropped sharply on the information earlier than recovering a part of its losses. The episode examined a core Zcash promise: that privateness and provable shortage can coexist.
How Ironwood Locks the Previous Pool
As soon as Ironwood prompts, the legacy Orchard pool stops accepting new deposits or inside transfers. Current cash within the outdated pool nonetheless work, however provided that they transfer by a brand new checkpoint referred to as a turnstile on their method to the brand new Ironwood pool.
The turnstile enforces a easy rule. Outflows from the outdated pool can’t exceed the cash that legitimately went in. Which means the overall circulating ZEC provide turns into verifiable the second Ironwood activates, with out ready for each consumer emigrate.
Two outcomes are doable if counterfeit cash existed. If no extra provide tries to depart the outdated pool, that stands as sturdy proof that nothing was exploited. If extra provide does seem, the turnstile blocks it from leaving, and the additional cash get destroyed, giving the general public proof of what occurred.
Mission Tachyon is operating formal verification on the brand new Ironwood circuits, producing machine-checked proofs somewhat than relying solely on handbook code evaluate.
What Customers Have to Do
Node operators should improve earlier than block 3,428,143 hits, anticipated round 8 a.m. EST on July 28. Pockets suppliers tied to the Zcash Open Growth Lab are including prompts to information shielded fund migration. Customers holding clear balances or funds exterior the outdated Orchard pool don’t have to take motion. The legacy zcashd node software program is reaching finish of life across the identical window, pushing remaining customers towards trendy shoppers.
Zakura Enters the Race
Zakura 1.0.0 launched July 15, 2026, forked from the Zcash Basis’s Zebra codebase. Sean Bowe, a Zcash cofounder and the cryptographic engineer main Mission Tachyon, constructed it with Dev Ojha, the Osmosis cofounder now main Valar Group. Each tasks are funded by non-public ZEC donations.
Zakura syncs the Zcash mainnet in about 4 hours and 20 minutes, in comparison with roughly 20 hours and 46 minutes for Zebra in the identical take a look at. Pruned snapshots let a brand new node bootstrap in beneath two minutes. A zcashd compatibility mode retains older wallets and integrations working through the transition.
Bowe and Ojha say the long-term objective is Visa and Mastercard-level throughput, close to 50,000 transactions per second, for personal funds. Right this moment’s shielded pool tops out close to one transaction per second. Getting there is dependent upon cryptography upgrades from Tachyon and Valar Group working alongside sooner node software program like Zakura.
The Zcash Basis says it welcomes the brand new shopper, framing a number of unbiased node implementations as a safeguard in opposition to the sort of single level of failure that permit the Orchard bug go unnoticed for so long as it did.
What This Means for Merchants
For merchants, the Ironwood fork works like a public audit with a deadline. The turnstile design means the market will get a transparent sign inside days, not months of hypothesis, about whether or not the Could bug was ever exploited. That quick, verifiable reply issues for a privateness coin, the place doubts about hidden provide can weigh on value longer than a typical bug disclosure.
Zakura provides a separate sign. Quicker sync instances and decrease node prices make it simpler for exchanges, miners, and block explorers to run unbiased infrastructure, which lowers the percentages {that a} future bug slips by unnoticed, the way in which the Orchard flaw did.
ZEC has stabilized above $500 because the July 28 activation approaches, with builders, the Basis, Shielded Labs, Mission Tachyon, and Valar Group aligned across the identical improve window.
