The upgrade follows the discovery of a critical vulnerability in the Orchard shielded pool that could have enabled the minting of counterfeit ZEC. Ironwood will introduce a new shielded pool, redirect new transactions away from the existing Orchard pool, and use Zcash’s turnstile mechanism to ensure the circulating supply stays within valid limits. Zcash Targets July Ironwood Upgrade Zcash developers have reached an agreement on a series of consensus rule changes that will be introduced as part of the network’s upcoming Ironwood upgrade. This follows the discovery of a critical vulnerability in the Orchard shielded pool that could have allowed the creation of unlimited counterfeit ZEC tokens. The proposed changes were outlined by Zcash developer Sean Bowe, who explained that Ironwood will introduce a new shielded pool built using the Orchard protocol. The upgrade is designed to strengthen the network’s security while preserving the privacy features that have made Zcash one of the leading privacy-focused cryptos. Under the new design, the Orchard protocol’s transaction circuit will include a special flag that is capable of disabling payments between users in the existing Orchard pool while still allowing users to generate change notes. According to Bowe, this functionality serves as an important privacy safeguard and helps to mitigate risks associated with the previously identified vulnerability. Once Ironwood is activated, the flag will be enabled on the current Orchard pool. Wallet software will prevent new incoming payments from being directed to the old pool by restricting the valueBalance field, effectively ensuring that new transactions are routed to the newly created shielded pool. Orchard currently serves as Zcash’s primary privacy-preserving transaction pool, allowing users to send and receive ZEC through zero-knowledge proofs that verify transaction validity without revealing sensitive information. Bowe stated that the upgrade will leverage Zcash’s existing turnstile mechanism to maintain a verifiable bound on the circulating supply of ZEC. This approach is intended to ensure that the amount of ZEC available for transactions never exceeds the amount that should legitimately exist on the network. The urgency of the upgrade stems from the recent disclosure of a severe flaw in the Orchard shielded pool. Due to the strong privacy guarantees provided by the protocol, developers were unable to determine whether any counterfeit ZEC had actually been created before the vulnerability was patched or, if so, how much may have been minted. By encouraging users to migrate funds from the old Orchard pool to the new Ironwood pool, developers hope to reduce exposure to any potential risks while eventually providing evidence that no unauthorized token creation occurred. The Zcash team is now focusing on implementation, specification development, ecosystem support, security audits, and formal verification processes ahead of activation. While the exact launch date is unknown, the Zcash Open Development Lab indicated that it is targeting late July for the Ironwood upgrade. ZEC’s price action over the past 24 hours (Source: CoinCodex) The vulnerability disclosure initially shook investor confidence, and led to a sharp selloff that saw ZEC plunge by more than 50% to around $303. However, the cryptocurrency has since recovered. ZEC gained more than 10% over the past 24 hours and was trading close to $470 at press time.
