Zcash activated its Ironwood upgrade, known formally as NU6.3, on July 28, 2026, at block height 3,428,143. The upgrade replaced Orchard, the network’s main privacy pool, with a new pool called Ironwood after researchers found a bug that could have let someone mint counterfeit $ZEC without leaving a public trace.
Since activation, more than 1.2 million $ZEC has already moved into Ironwood, and the new pool has overtaken both Orchard and Sapling to become the largest shielded pool on the network.
This is not a routine software patch. It is a full replacement of the cryptographic machinery that keeps Zcash’s private transactions honest. Here is what happened, why it happened, and what the migration numbers tell us so far.
What Caused the Ironwood Upgrade?
A flaw in Orchard’s zero-knowledge proof circuit, discovered on May 29, 2026, by Shielded Labs researcher Taylor Hornby, forced Zcash developers to build and ship a replacement shielded pool.
Zcash uses shielded pools to hide the sender, receiver, and amount of a transaction behind zero-knowledge proofs. Orchard, launched in 2022, was the network’s most advanced pool until the bug surfaced.
Hornby’s discovery, which the community began calling the Orchard “infinity” bug, sat inside the circuit logic that verifies how much $ZEC a shielded transaction is allowed to spend. In theory, an attacker who understood the flaw could have created $ZEC out of nothing, and because shielded transactions hide amounts by design, there would be no visible record of it happening.
A CoinDesk Research review published in July found no evidence the bug had actually been exploited. But the private nature of Orchard transactions meant nobody could prove a negative. That uncertainty, sitting inside a pool holding roughly 3.66 million $ZEC, is what pushed developers toward a full rebuild rather than a patch.
Key Facts About the Bug
- Discovered May 29, 2026, by Taylor Hornby of Shielded Labs
- Located in Orchard’s zero-knowledge proof circuit, live since Orchard’s 2022 launch
- Could theoretically allow undetectable minting of counterfeit $ZEC
- No confirmed exploitation found, but shielded design made exploitation impossible to rule out
- Triggered emergency patch work in June, followed by the full NU6.3 network upgrade
How Does the Ironwood Shielded Pool Work?
Ironwood is a newly separated shielded pool that started with zero $ZEC at activation. Every coin previously held in Orchard has to be moved over individually by its owner. There is no automatic conversion.
The mechanism controlling that movement is called a turnstile. It is an accounting rule enforced at the protocol level that caps the total amount of $ZEC leaving Orchard at the amount that was verifiably deposited into it in the first place. In practice, this means even if the old bug had been exploited and extra $ZEC existed inside Orchard, that extra $ZEC could never cross into Ironwood. The turnstile creates an independently checkable ceiling on supply, closing the exact loophole the bug had opened.
Orchard itself did not disappear. After activation, it stopped accepting new deposits and internal transfers, but existing holders can still withdraw through the turnstile at their own pace. That is why the migration is described as voluntary rather than forced, even though the direction of travel is one-way.
Ironwood also introduced a new transaction format, v6, and a related feature called quantum-recoverable notes under ZIP 2005. This does not make Zcash quantum-resistant today. It builds a recovery pathway that could let users reclaim shielded funds later if a working quantum-recovery protocol is designed and activated, and if advances in quantum computing ever threaten the cryptography protecting the pool.
What Changed Under the Hood
- New Ironwood shielded pool with formally verified circuit properties
- Turnstile mechanism capping Orchard withdrawals at verifiable deposits
- New v6 transaction format
- Quantum-recoverable notes (ZIP 2005), a foundation for future recovery, not present-day quantum protection
- Zebra becomes the only supported node implementation, ending zcashd support (zcashd’s end-of-support halt was set at block 3,417,100, just before Ironwood activation)
Why Is Ironwood Called Zcash’s Biggest Upgrade in Years?
Ironwood is being called Zcash’s most significant network upgrade in years because it touches supply integrity, node software, and transaction formatting all at once, not because of any single dramatic feature.
Beyond the new pool, NU6.3 finalized a long-planned transition away from zcashd, the original Zcash node software, toward Zebra and the broader Z3 stack, which also includes Zaino and Zallet.
Sean Bowe, a core Zcash developer, confirmed activation would proceed at block 3,428,143, roughly 8 a.m. EST on July 28, after a one-week delay from the original July 21 target. Shielded Labs had flagged that running the Orchard fix and the zcashd-to-Zebra migration at the same time left preparation windows too tight, so developers pushed the date back by a week to reduce operational risk for exchanges, mining pools, and wallet providers.
Zebra 6.0.0, released ahead of activation, also carried an unrelated mempool fix. It closed a separate issue that let peers send expensive-to-verify, non-standard transactions capable of slowing node responsiveness. The Zcash Foundation said that flaw affected availability only and did not put funds, blocks, or consensus at risk.
The Migration Numbers, Tracked Over Three Weeks
Migration into Ironwood has been gradual but steady, tracked publicly through dashboards including one maintained by Zodl. The pace picked up noticeably in the second and third weeks after activation.
- Day one (July 29): About 176,000 $ZEC, worth roughly $81 million, had moved into Ironwood, close to 5% of Orchard’s 3.66 million $ZEC balance at activation
- Following 24 hours: Around 46,000 more $ZEC crossed over, pushing Orchard’s balance down to about 3.51 million
- Within the first week: Roughly 182,000 $ZEC had migrated, including more than 51,700 $ZEC in a single 24-hour period, according to the Zodl migration dashboard
- August 9: Ironwood held 1,976,378 $ZEC, valued at more than $1 billion, and had overtaken Orchard to become the network’s largest shielded pool
- August 9 (Zcash Ecosystem Digest): A separate tracker put the figure at 1,288,588 $ZEC migrated, with total shielded supply across all pools reaching 4,418,357 $ZEC
- August 18: Roughly $260 million worth of $ZEC had moved into Ironwood in total value terms cited by market analysts, with Ironwood by then also ahead of the older Sapling pool.
Network-wide chain-supply data from August 9 put Orchard’s remaining balance at roughly 1.77 million $ZEC, down from 3.66 million at activation, meaning more than half of Orchard’s original holdings had already crossed into Ironwood within about two weeks.
For context, Zcash’s shielded pools combined, Ironwood, Orchard, and Sapling, held about 4.36 million $ZEC as of August 10, 2026, worth roughly $2.22 billion. Sapling, the oldest shielded pool, dating to 2018, still held around 540,000 to 582,000 $ZEC through this period, largely untouched by the migration since it operates independently of the Orchard-to-Ironwood turnstile. The transparent pool, where balances are fully public, held about 12.4 to 12.5 million $ZEC, still the largest single pool on the network by coin count.
What Has Happened to the $ZEC Price?
$ZEC‘s price reaction to Ironwood has been mixed, moving more with broader market sentiment than with the technical milestone itself.
On activation day, July 28, $ZEC dropped roughly 9% intraday to around $460 before partially recovering to near $475. Over the following days it slid further, trading down more than 5% in 24 hours and nearly 15% over the prior week by July 28-29, with prices ranging between roughly $459 and $491. That weakness followed a much larger decline earlier in the year: $ZEC had already fallen more than 50% after the Orchard bug was first disclosed in late May, well before Ironwood activated.
By mid-August, sentiment had turned. $ZEC traded near $500 to $510 on August 19, as migration volume into Ironwood accelerated. Market analysts tracking the move noted that clearing $520 would open a path toward $540 and then $560 to $580, while a drop back below $500 remained a risk if migration stalled or a new security issue emerged.
What Comes Next for Zcash?
Zcash’s roadmap does not stop at Ironwood. Developers are coordinating a coin-holder vote starting August 25, running about 18 days, to decide the scope of Network Upgrade 7 (NU7), according to a Zcash core developer’s update in the ZecHub ecosystem digest.
Early, unconfirmed roadmap coverage points to Zcash Shielded Assets and a significant speed improvement for private transactions as candidate features for NU7, though the vote will determine the final scope. Separately, market-tracking coverage has referenced a quantum-proof protocol upgrade, building on the quantum-recoverable notes introduced in Ironwood, as a target for November 2026. A working quantum-recovery mechanism was not part of the July release, and neither the November date nor the NU7 feature list should be treated as finalized until Zcash developers confirm them.
Wallet providers and exchanges are still catching up. Services including Zodl and Cake Wallet have released or planned dedicated migration tools, and infrastructure operators have been directed toward the Zebra-based Z3 stack now that zcashd is no longer supported.
How quickly the remaining $ZEC still sitting in Orchard, roughly 1.6 to 1.8 million coins based on the most recent chain-supply trackers, moves across will depend on how fast that tooling reaches ordinary holders, not on any protocol deadline, since migration remains voluntary and self-paced.
Conclusion
Ironwood closes the specific vulnerability that Taylor Hornby found in Orchard’s proof circuit by replacing the pool entirely and enforcing a turnstile that makes counterfeit $ZEC impossible to move forward into the new system. In three weeks, migration went from zero to well over half of Orchard’s original 3.66 million $ZEC balance, and Ironwood now holds more value than either of Zcash’s older shielded pools.
Zebra has fully replaced zcashd as the network’s node software, and the foundation for a future quantum-recovery mechanism is now in place, even though that mechanism does not exist yet.
$ZEC‘s price has moved with the broader market more than with the upgrade itself, recovering to the $500 to $510 range by mid-August after a sharp drop tied to the original bug disclosure in May. The migration is ongoing and voluntary, with roughly 1.6 to 1.8 million $ZEC still left to cross from Orchard as of the most recent trackers.
- Report by CoinDesk: About $80 million $ZEC crosses into Zcash’s Ironwood pool in the first day
- Report by CoinDesk: Zcash seals $1.7 billion shielded pool as Ironwood upgrade activates
- Report by The Block: Zcash activates Ironwood upgrade, launching new shielded pool after Orchard vulnerability
- Report by crypto.news: Zcash sets Ironwood upgrade for July 28 after Orchard bug
- Report by Cryptonomist: Zcash Ironwood upgrade secures network with verified shielded pool
- Report by Cryptonomist: Zcash Ironwood upgrade, security fix and market impact
- Report by CryptoTimes: 182K $ZEC migrates after Zcash activates Ironwood upgrade
- Report by KuCoin: Zcash Ironwood NU6.3 goes live, what the new shielded pool means for $ZEC holders
- Report by KuCoin: Ironwood surpasses Orchard as the largest shielded pool on Zcash, locking over $1 billion in $ZEC
- Report by Crowdfund Insider: Privacy focused Zcash ($ZEC) launches Ironwood upgrade following Orchard security vulnerability
- Report by Invezz: Zcash climbs as $1.6B floods Ironwood, is a bigger $ZEC breakout coming?
- Zcash Ecosystem Digest on ZecHub: Post covering Ironwood migration totals and NU7 coin-holder vote, August 9
