Ironwood Goes Live on Zcash (ZEC) Tomorrow — Here Is What the Quantum Privacy Upgrade Actually Does

Zcash (ZEC) is activating its Ironwood network upgrade on Tuesday, July 28, marking one of the most technically significant moments in the privacy coin’s history.

Zcash Had a Hole in Its Core Circuit for Years 

Ironwood, formally designated NU6.3, introduces a new shielded pool built on Orchard’s existing cryptographic framework while adding its own note commitment tree, nullifier set, and chain value pool delivered through a new v6 transaction format. 

The upgrade activates at block height 3,428,143 on mainnet. In practical terms, it spins up a fresh privacy pool and simultaneously locks the old Orchard pool permanently — no new transactions in, no new transactions out. The only exit from Orchard after Tuesday is through turnstile, the protocol’s security mechanism.

The turnstile has one rule: it will not allow more ZEC to exit a pool than legitimately entered it. That single rule is what makes Tuesday’s activation something closer to a public audit than a routine software upgrade.

Market expert Milk Road weighed in on the matter in a social media post this Monday, stating that the issue dates back to May 29 this year, when researcher Taylor Hornby discovered a bug that had been sitting in Orchard’s proof circuit since the pool launched in May 2022.

The bug involved an under-constrained elliptic curve check, meaning the network would technically accept a transaction spending Zcash that never existed. Unlimited invisible counterfeit ZEC was theoretically possible the entire time. 

The bug was found during an AI-assisted audit using Anthropic’s Claude Opus 4.8, which built a working exploit — an AI catching what years of cryptographers had not.

Developers responded quickly. An emergency soft fork went out within days, followed by the NU6.2 hard fork on June 3. No funds were confirmed stolen, and no counterfeit Zcash was confirmed minted. 

Tuesday’s Activation Will Answer the Biggest Question 

However, Milk Road asserts that here is the problem that no patch can fix — in a system engineered to hide all transactions, nobody can prove the bug was never exploited. 

Zcash’s Ironwood activation is the closest thing to an answer the network can produce, the expert said. When the Orchard pool closes, the turnstile will process every exit. If the total amount that leaves matches the total that legitimately entered, the supply is clean.

If the pool comes up short — meaning more was withdrawn than was deposited — that gap represents either confirmed exploitation or lost funds. The complication is the order of exits. The turnstile pays out in sequence. Early movers get paid in full. Late movers find out if anything is left. 

ZEC was trading at $490 at the time of writing, still roughly 84% below its all-time high of $3,191, according to CoinGecko data. 

Featured image generated with OpenArt.