Zcash developers activated the Ironwood upgrade at block height 3,428,143 as part of the NU6.3 network upgrade, replacing the Orchard shielded pool with a formally verified alternative. The replacement followed researcher Taylor Hornby's discovery in late May of an infinity bug in Orchard that posed a theoretical risk of undetectable counterfeit ZEC creation. The vulnerability in one of Zcash's core privacy mechanisms prompted what developers described as a wartime-mode development sprint to deploy a full replacement rather than a patch.
Hornby Discovered Orchard Infinity Bug in Late May
Taylor Hornby, a researcher at Shielded Labs, discovered the Orchard infinity bug in late May. The flaw existed deep inside Orchard's zero-knowledge circuit and posed a theoretical risk of minting counterfeit ZEC without leaving any publicly detectable trace. No evidence emerged that the vulnerability had ever been exploited. ZEC lost more than half its value after the disclosure became public.
Emergency patches deployed in early June temporarily disabled Orchard. A corrected circuit arrived through the NU6.2 hard fork within five days. Developers stated it was mathematically impossible to prove with certainty that hidden inflation had never occurred inside the old pool, making a full replacement the only route to restoring verifiable supply integrity.
Shielded Labs co-founder Zooko Wilcox initially proposed replacing Orchard outright. What followed was roughly 60 days of coordinated development across Shielded Labs, the Zcash Open Development Lab (ZODL), Project Tachyon, Valar Group, and the Zcash Foundation. ZODL Executive Director Josh Swihart stated that engineers from his organization contributed 82% of the merged changes across Zcash's protocol and wallet repositories during the replacement effort.
Ironwood Introduced Separate Accounting System and Quantum-Recoverable Notes
Ironwood introduced an entirely separate accounting system with its own note commitment tree, nullifier set, and chain value pool. The structure allows any node to track the new shielded pool independently from everything that came before it.
The upgrade installed a public accounting checkpoint described by the project as a turnstile. Funds can leave Orchard through that turnstile, but the mechanism mathematically prevents more value from exiting than legitimately entered the older pool. Any hypothetical counterfeit coins minted inside Orchard before or during the vulnerability window would be trapped there permanently, unable to contaminate Ironwood's supply accounting.
The new pool incorporated ZIP 2005 quantum-recoverable notes. The feature does not make Zcash transactions quantum secure today — a separate recovery protocol would still need to be designed and activated in the future. The NU6.3 upgrade made Zebra the required node implementation, ending support for the older zcashd software across the network.
Project Tachyon Completed 2,700-Theorem Formal Verification
Project Tachyon completed a machine-checked mathematical proof alongside Zcash developers. Written in the Lean programming language, the proof consists of more than 2,700 theorems developed over more than a month by three teams of researchers and cryptographers. The proof formally verifies that Ironwood cannot create undetectable counterfeit ZEC under its stated design assumptions.
The proof covers the components required for balance integrity: Ironwood's zero-knowledge proof system, its circuit rules, and ledger-level accounting. Zcash co-founder Sean Bowe stated: "A cross-team collaboration has just changed Zcash's history forever, eliminating all sources of undetectable counterfeiting bugs from the new Ironwood protocol."
The formal verification covers balance integrity but does not extend to Ironwood's separate privacy guarantees. Supply soundness and transactional privacy are distinct properties, and the proof addresses only the former.
Migration Tracker Shows 40,207 ZEC Moved to Ironwood
Orchard entered an exit-only phase. The pool no longer accepts new shielded activity, but users can still withdraw funds at their own discretion. According to Zcash's migration tracker, roughly 40,207 ZEC have moved into Ironwood since activation. Approximately 3.6 million ZEC remain inside Orchard awaiting migration.
At its peak, Orchard accounted for nearly 88% of Zcash's shielded token supply, according to data from The Block, with the older Sapling and Sprout pools making up the remainder.
FAQ
What is the Zcash Ironwood upgrade?
Ironwood is a Zcash network upgrade that replaced the vulnerable Orchard shielded pool with a formally verified shielded pool. It activated at block height 3,428,143 as part of the NU6.3 hard fork.
Why was the Ironwood upgrade necessary?
The upgrade was needed because an infinity bug discovered in the Orchard pool in late May posed a theoretical risk of undetectable counterfeit ZEC creation. Developers stated it was mathematically impossible to prove the bug was never exploited, making a full replacement necessary rather than relying solely on a patch.
What happens to funds still in the Orchard pool?
Orchard entered an exit-only phase. Users can still withdraw funds from it, but the pool no longer accepts new shielded transactions. Approximately 3.6 million ZEC remain in Orchard awaiting migration to Ironwood, while about 40,207 ZEC have already moved across.
