Zcash users transferred around $80 million worth of ZEC into the new Ironwood shielded pool within the first 24 hours of its launch on July 28, 2026. This marks the start of a major overhaul of the privacy infrastructure after the network sealed off its previous Orchard shielded pool, which held between $1.7 billion and $1.89 billion in tokens but contained a critical vulnerability.
Fixing a Four-Year-Old Vulnerability
The Orchard pool, introduced in 2022, was found to have a bug in its proof circuit that could have allowed the creation of counterfeit ZEC without detection. This flaw went unnoticed for four years, putting nearly two billion dollars worth of shielded ZEC at theoretical risk. The Ironwood upgrade, known as NU6.3, replaced Orchard with a new shielded pool governed by ZIP 2005. This update brought formally verified proof circuits and quantum-resistant record-keeping, enhancing both security and future-proofing the network.
The Turnstile Migration and User Action Required
To move funds from the compromised Orchard pool to Ironwood, Zcash introduced a "turnstile" mechanism that enforces strict checks: withdrawals from the new pool cannot exceed verified deposits. This prevents any counterfeit ZEC created through the old bug from entering the new system. However, unlike many network upgrades that run automatically, users must actively migrate their funds. Although $80 million moved on day one, this is only a fraction of the total locked in Orchard. Many holders still need to take steps to transition to Ironwood if they want to maintain shielded privacy features.
ZEC traded between $463 and $500 around the upgrade, reflecting cautious market optimism. The next phase will depend heavily on user adoption and the smooth migration of billions in shielded assets.
This material is informational and does not constitute financial advice.
