Ironwood Goes Live as Zcash Locks Down Orchard and Forces a $1.8B Migration
Zcash activated its Ironwood network upgrade on Tuesday, replacing its vulnerable Orchard shielded pool with a hardened system designed to restore independent verification of the cryptocurrency’s circulating supply.
The NU6.3 upgrade went live July 28 at block height 3,428,143, introducing a separate Ironwood shielded pool, a new transaction format, and a mandatory accounting checkpoint for funds leaving Orchard. New shielded payments are now directed to Ironwood, while Orchard has been restricted to withdrawals.
The change follows the discovery of a critical cryptographic weakness that had remained inside Orchard since the pool launched in May 2022. Independent security researcher Taylor Hornby found the flaw on May 29 during an AI-assisted audit using Anthropic’s Claude Opus 4.8 model.
The vulnerability affected an elliptic-curve scalar multiplication component within the Halo 2 proving system. The incomplete circuit constraints could have allowed a malicious user to generate counterfeit Orchard notes. Developers said there was no evidence the flaw had been exploited, but Orchard’s privacy design means researchers cannot conclusively prove that exploitation never occurred.
Zcash’s existing turnstile architecture prevented the global supply from exceeding the protocol’s 21 million ZEC cap. An emergency soft fork temporarily restricted Orchard activity, followed by the NU6.2 hard fork that corrected the circuit. Ironwood became the longer-term solution.
Ironwood maintains a separate note commitment tree, nullifier set, chain history, and value pool. The old Orchard pool cannot create new outputs or process internal transfers, forcing its remaining funds to exit through the protocol’s public turnstile. That checkpoint ensures the total amount leaving Orchard cannot exceed the amount that legitimately entered it, trapping any hypothetical counterfeit notes.
The design allows node operators to verify Zcash’s circulating supply by examining balances across Ironwood, Sapling, Sprout, and the remaining audited Orchard value. Orchard reportedly held about 3.6 million to 3.76 million ZEC at activation, worth roughly $1.7 billion to $1.9 billion. Ironwood began with no balance.
Project Tachyon and other contributors applied formal verification, independent audits, and AI-assisted analysis to Ironwood’s critical circuits. Ironwood also implements quantum-recoverable notes under ZIP 2005. The feature creates a recovery path for users to reclaim funds if future quantum computing breakthroughs compromise the pool’s cryptography.
Wallet providers, exchanges, and node operators must update their software. Zodl, Cake Wallet, and other services have released or planned migration tools.
ZEC traded near $466 after the activation, down 4.8% over 24 hours. The cryptocurrency remained up more than 1,000% over one year. Ironwood does not change Zcash’s privacy model or maximum supply. Its broader significance rests on whether formal methods and public turnstile accounting can strengthen confidence in private digital money.