Key Takeaways
Zcash targets July 21, 2026 for Ironwood mainnet activation after sealing the Orchard pool.ZEC trades at $462.33 on July 4, up 13.3% in seven days and over 1,000% in a yr.Node operators should migrate to Zebra or up to date shoppers earlier than Ironwood’s mainnet launch.
The improve traces again to a discovery on Might 29. Safety researcher Taylor Hornby, working below contract for Shielded Labs, discovered a soundness flaw contained in the Orchard shielded pool’s elliptic curve code. The bug lived in a bit of the halo2_gadgets crate dealing with level multiplication. A prover may swap within the flawed base level and nonetheless get the circuit to just accept an invalid proof.
That flaw mattered as a result of Orchard hides sender, receiver and quantity by design. A counterfeit be aware created contained in the pool would look similar to an actual one. The bug had sat within the code since Orchard went dwell in Might 2022 as a part of the NU5 improve.
Fast Patch, No Confirmed Losses
Zcash’s core engineers, together with Daira-Emma Hopwood, Kris Nuttycombe and Jack Grigg, confirmed the problem inside hours of Hornby’s report. A tender fork disabled new Orchard actions round June 1 to comprise publicity. A tough fork, NU6.2, adopted on June 3 with a corrected verifying key, restoring full Orchard performance.
Orchard transactions paused for roughly a day in the course of the rollout. Clear and Sapling transfers saved working the entire time. Zcash Open Improvement Lab and Shielded Labs each say they discovered no proof that the bug was ever exploited, and the community’s turnstile accounting, which tracks worth coming into and leaving every pool, confirmed no indicators of unauthorized minting.
There’s a catch builders can’t patch away. Orchard’s privateness means no one can show a unfavourable. No cryptographic technique exists to substantiate counterfeiting by no means occurred, solely that it most likely didn’t.
Ironwood Closes the Hole
Introduced June 6, Ironwood is the repair for that remaining uncertainty. It ships as NU6.3 and was constructed by ZODL alongside Tachyon, Valar Group, the Zcash Basis and Shielded Labs.
The improve opens a brand new Ironwood shielded pool constructed on the patched Orchard circuit, now backed by ongoing formal verification and added impartial audits. On the identical time, the previous Orchard pool will get sealed. Wallets will block new deposits into it, inner transfers between customers contained in the pool get disabled, and funds can solely go away via the turnstile towards Ironwood or a clear deal with.
That sealing is the precise repair. As soon as the legacy pool stops taking new worth and stops circulating internally, any theoretical counterfeit notes get boxed in. Anybody working a full node can then add up balances throughout the energetic swimming pools and make sure the full provide strains up with what the protocol permits, with out ready on developer assurances or a full migration.
Ironwood additionally carries ZIP 2005, a set of be aware format adjustments meant to assist restoration in a future quantum computing situation. It doesn’t make Zcash quantum-secure in the present day, nevertheless it lays the groundwork for a smoother transition later.
Timeline and What Customers Have to Do
Testnet activation for Ironwood landed round July 3 and 4. Zebra, the Rust consumer maintained by the Zcash Basis, and Valar Group’s impartial implementation are each working launch candidates in opposition to it.
Mainnet activation is focused for round July 21, tied to a zcashd end-of-support block. Builders say hashrate signaling seems prepared, and current testnet time offers wallets sufficient runway, so a delay isn’t presently on the desk.
Node operators on older zcashd builds might want to transfer to Zebra or an up to date consumer earlier than that date. Wallets are anticipated to immediate customers emigrate shielded funds out of the previous Orchard pool with minimal friction, usually a single approval.
Market Response
ZEC’s worth tells its personal story of the previous six weeks. The token fell greater than 50% from round $630 right down to the $250 to $300 vary as soon as the vulnerability turned public, then rebounded sharply as soon as the patch and Ironwood plan landed.
As of July 4, ZEC trades at $462.33, up 13.3% over the previous seven days, even after a flat 24-hour session. Zooming out, the coin is up greater than 1,000% over the previous yr, a stretch that features each a run to a 52-week excessive close to $744 in November 2025 and the Orchard scare in late Might.
Investor Chamath Palihapitiya has publicly flagged Ironwood’s provide verification mannequin as a significant step for the coin, including outdoors consideration to what began as a bug repair.
For now, the work left is coordination. Formal verification outcomes are due earlier than mainnet, and pockets, change, and infrastructure suppliers nonetheless must ship up to date assist within the subsequent two and a half weeks.
