The Ironwood Activation
Zcash has officially activated its Ironwood (NU6.3) network upgrade at block 3,428,143, marking a significant transition for the privacy-focused cryptocurrency. The upgrade effectively seals the previous “Orchard” shielded pool, which held approximately 3.66 million ZEC—valued at roughly $1.7 billion—and initiates a new, empty private pool for future transactions.
The primary driver for this transition is a previously undisclosed bug discovered on May 29 by Shielded Labs researcher Taylor Hornby. The flaw, located within the Orchard proof circuit, existed since the pool’s launch in May 2022 and could have theoretically allowed for the creation of counterfeit ZEC without leaving an on-chain trail.
The Turnstile Mechanism
To address the risk posed by the four-year-old bug, developers implemented a “turnstile” mechanism at the boundary of the new Ironwood pool. Because the network cannot verify whether any counterfeit tokens were minted during the period the bug was active, the turnstile restricts total withdrawals from the legacy pool to the amount of ZEC that was verifiably deposited. Any potential counterfeit coins remain trapped within the sealed Orchard pool, unable to enter the new system.
While the bug was patched shortly after discovery, the nature of zero-knowledge proofs means there is no historical record to confirm if the vulnerability was ever exploited. However, research from CoinDesk indicates that the steady growth of the Orchard balance—even during periods of high price volatility—suggests the flaw likely remained unexploited.
Enhanced Security Features
Beyond resolving the Orchard vulnerability, Ironwood introduces two critical security enhancements designed to future-proof the network:
- Quantum Resilience: The new record-keeping system is built to ensure that transactional data remains recoverable even if quantum computing technology eventually compromises current cryptographic standards, as outlined in ZIP 2005.
- Formal Verification: The new proof circuit is undergoing formal verification, a rigorous mathematical process that proves the software behaves correctly in every possible scenario, aiming to eliminate entire classes of bugs that plagued the previous implementation.
As of the upgrade, migration is entirely voluntary and user-driven. Early data indicates that approximately 1,500 ZEC have already been moved into the new Ironwood pool. The speed at which the remaining 3.66 million ZEC is transferred will now serve as a key metric for the network’s transition.