Inside story of Zcash Ironwood upgrades and the influx of new shielded pools

Zcash activates Ironwood upgrade: Replace the privacy pool and fix potential vulnerabilities

On July 28, 2026, at a block height of 3,428,143, Zcash activated its Ironwood upgrade (officially named NU6.3). This upgrade replaces Orchard, the network's original main privacy pool, with a new privacy pool called Ironwood. Previously, researchers discovered a vulnerability in Orchard that could allow attackers to forge a fake ZEC out of thin air without leaving any public traces. Since activation, more than 1.2 million ZECs have been transferred to Ironwood, and the new pool has surpassed Orchard and Sapling to become the largest privacy pool on the web.

This is not a regular software patch, but a complete replacement of the cryptographic mechanism that maintains the integrity of Zcash's private transactions. The following describes the incident, why it occurred, and what was revealed by the migration data.

What was the cause of the Ironwood upgrade?

On May 29, 2026, Taylor Hornby, a researcher at Shielded Labs, discovered flaws in Orchard's zero-knowledge proof circuit, forcing Zcash developers to build and deploy an alternative privacy pool. Zcash uses a privacy pool to hide the sender, recipient, and amount of a transaction through zero-knowledge proof. Orchard, which will be launched in 2022, was the most advanced privacy pool on the web until the vulnerability was discovered.

Hornby's discovery, known by the community as the Orchard "infinite" vulnerability, lies in the circuit logic that verifies the amount of ZECs that private transactions can cost. In theory, an attacker with knowledge of the vulnerability could create ZEC out of thin air, and since private transactions were designed to hide the transaction amount, no visible record would be left. A review report released in July found no evidence that the vulnerability was actually exploited. But the private nature of Orchard's transactions means that no one can prove they were not being used. This uncertainty, coupled with the pool holding approximately 3.66 million ZECs at the time, prompted the developers to decide to undertake a comprehensive rebuild rather than patch it.

Key facts about the vulnerability

• Discovery: May 29, 2026, discovered by Taylor Hornby of Shielded Labs.
• Bug location: Located in Orchard's zero-knowledge proof circuit, it has existed since Orchard went online in 2022.
• Potential impact: In theory, forged ZECs could be allowed to be forged without detection.
• Utilization: No evidence of actual exploitation was found, but privacy design made it impossible to completely rule out the possibility of exploitation.
• Response measures: Emergency patch work was triggered in June, followed by a complete NU6.3 network upgrade.

How does the Ironwood Privacy Pool work?

Ironwood is a new, separate privacy pool with a zero balance when activated. Every ZEC previously held in Orchard required manual transfer by its owner and did not have an automatic conversion function. The mechanism that controls this transfer process is called a "turnstile," an accounting rule enforced at the protocol level that limits the total amount of ZECs transferred out of Orchard to no more than the amount originally verifiably deposited into the pool. In effect, this means that even if old vulnerabilities are exploited and additional ZECs exist within Orchard, those additional ZECs will never be transferred to Ironwood. The gate-gate mechanism creates an independently verifiable upper limit on supply, thus plugging gaps that could be opened by loopholes.

Orchard itself has not disappeared. After activation, it no longer accepts new deposits and internal transfers, but existing holders can still withdraw their own funds through the gate mechanism. This is why migration has been described as voluntary rather than mandatory, although its direction is one-way.

Ironwood has also introduced a new transaction format, v6, and a related feature called "Quantum Recoverable Notes"(based on the ZIP 2005 proposal). This does not make Zcash resistant to quantum computing attacks now, but rather builds a recovery path. If effective quantum recovery protocols are designed and activated in the future, and the development of quantum computing threatens the cryptographic technology that protects the pool, this feature could allow users to recoup their privacy funds in the future.

What happened to the bottom layer

• The new Ironwood privacy pool has formalized verified circuit characteristics.
• A gate mechanism that limits Orchard withdrawals to verifiable deposits.
• New v6 transaction format.
• The Quantum Recoverable Note (ZIP 2005) lays the foundation for future recovery functions and is not a current quantum protection measure.
• Zebra became the only supported node implementation and stopped supporting zcashd (zcashd's terminated support block height was 3,417,100, just before Ironwood was activated).

Why is Ironwood called Zcash's largest upgrade in years?

Ironwood is called Zcash's most important network upgrade in years not because of a single eye-catching feature, but because it touches on supply integrity, node software, and transaction formats at the same time. In addition to the new privacy pool, NU6.3 finally completed the long-term transition from the original Zcash node software zcashd to Zebra (and the broader Z3 technology stack, including Zaino and Zallet). Zcash core developer Sean Bowe confirmed that activation will occur in Block 3,428,143, approximately 8 a.m. EST on July 28, a week later than the original July 21 target. Shielded Labs has pointed out that simultaneous Orchard fixes and zcashd to Zebra migration have left too tight a preparation window for exchanges, mining pools and wallet providers, so developers have postponed the date by a week to reduce operational risk.

The 6.0.0 version of Zebra, released before activation, also included an unrelated memory pool fix. The fix blocked another issue, which was allowing peers to send non-standard transactions with high verification costs, potentially slowing down the node's response speed. The Zcash Foundation said the flaw only affects availability and does not endanger the security of funds, blocks or consensus.

Migration data tracked over three weeks

The migration to Ironwood is smooth but continuous and can be tracked through multiple public panels, including dashboards maintained by Zodl. In the second and third weeks after activation, the migration rate accelerated significantly.

• Day 1 (July 29): Approximately 176,000 ZECs (worth approximately US$81 million) were transferred to Ironwood, close to 5% of Orchard's balance of 3.66 million ZECs at the time of activation.
• The next 24 hours: approximately 46,000 ZECs were transferred, and the Orchard balance dropped to approximately 3.51 million.
• Within the first week: According to Zodl migration dashboard data, approximately 182,000 ZECs have been migrated, of which the maximum amount transferred in a single day exceeds 51,700 ZECs.
• August 9: Ironwood holds 1,976,378 ZECs worth more than US$1 billion, surpassing Orchard to become the largest privacy pool on the web.
• August 9 (Zcash Ecosystem Summary): Another tracker showed 1,288,588 ZECs migrated, bringing the total privacy supply of all privacy pools to 4,418,357 ZECs.
• August 18: Market analysts cited data saying that approximately US$260 million worth of ZEC in total value has been transferred to Ironwood, which has also surpassed the earlier Sapling pool.

On-line supply data as of August 9 showed that Orchard's remaining balance was approximately 1.77 million ZECs, which was lower than the 3.66 million at the time of activation, which means that in about two weeks, more than half of Orchard's original holdings have been transferred to Ironwood. As background, as of August 10, 2026, Zcash's privacy pools (Ironwood, Orchard and Sapling) collectively held approximately 4.36 million ZECs, valued at approximately US$2.22 billion. Sapling, the oldest privacy pool (which began in 2018), still holds approximately 540,000 to 582,000 ZECs during this period and is largely unaffected by the migration due to its independent gate mechanism from Orchard to Ironwood. The transparent pool (the balance is fully disclosed) holds approximately 12.4 million to 12.5 million ZECs, still the largest single pool on the network in terms of coins.

What is the price trend of ZEC?

ZEC's price response to Ironwood's upgrade was mixed, with its trend influenced more by broader market sentiment than the technical milestone itself. On the activation day of July 28, ZEC fell about 9% within the day to about $460, before partially recovering to nearly $475. The decline continued in the following days, falling more than 5% in the 24 hours ending July 28-29, and nearly 15% in the past week, with prices fluctuating between approximately $459 and $491. The previous weakness followed a larger decline earlier this year: ZEC had fallen more than 50% after the Orchard vulnerability was first disclosed at the end of May, well before Ironwood was activated.

By mid-August, market sentiment had shifted. As volume moving to Ironwood accelerated, ZEC traded close to $500 to $510 on August 19. Market analysts tracking the trend point out that a break of $520 would open the way to $540, or even $560 to $580, while the risk of falling back below $500 still exists if migration stalls or new security issues arise.

How will Zcash develop next?

Zcash's roadmap does not stop at Ironwood. According to updates from Zcash core developers in the ZecHub Ecosystem Summary, developers are coordinating a token holder vote starting on August 25 and lasting approximately 18 days to determine the scope of the seventh network upgrade (NU7). Early unconfirmed roadmap information noted that significant improvements in Zcash's privacy assets and the speed of privacy transactions are candidate features for NU7, but the final scope will be decided by a vote. In addition, market tracking reports mentioned that based on the quantum recoverable notes introduced in Ironwood, a target date for an upgrade to the quantum proof protocol is November 2026. However, the July release does not include a workable quantum recovery mechanism, and neither the November date nor the NU7 feature list should be considered final until confirmed by Zcash developers.

Wallet providers and exchanges are still catching up. Services including Zodl and Cake Wallet have released or plan to release dedicated migration tools, and infrastructure operators have been told to move to Zebra-based Z3 technology stacks because zcashd is no longer supported. According to the latest on-chain supply trackers, there are still approximately 1.6 million to 1.8 million ZECs left in Orchard, and the speed at which these remaining ZECs are relocated will depend on the speed at which ordinary holders can access these tools, rather than any agreement deadline, because the migration remains voluntary and autonomous.

Conclusion

Ironwood blocked a specific vulnerability discovered by Taylor Hornby in the Orchard certification circuit by completely replacing the Orchard pool and implementing a gating mechanism, making it impossible for a counterfeit ZEC to enter the new system. Within three weeks, the migration started from scratch, exceeding more than half of Orchard's original balance of 3.66 million ZECs, and Ironwood now holds more value than either of Zcash's two old privacy pools. Zebra has completely replaced zcashd as network node software, and the foundation for a future quantum recovery mechanism has been laid, although this mechanism does not yet exist. ZEC's price fluctuated more with the broader market than with the upgrade itself, recovering to the $500 to $510 range in mid-August after falling sharply in May due to bug disclosures. According to the latest tracker data, the migration is still ongoing and voluntary, with approximately 1.6 million to 1.8 million ZECs remaining to be transferred from Orchard.