Zcash developers announced on Thursday that the Ironwood network upgrade is nearing testnet activation, marking progress toward restoring user confidence following May's critical counterfeiting vulnerability disclosure. The vulnerability in Zcash's Orchard shielded pool left developers unable to verify whether counterfeit ZEC had been created, triggering a price collapse from over $600 to around $300 in two days. Announced in June, Ironwood introduces a new shielded pool and accounting system designed to allow public verification of circulating supply while maintaining transaction privacy, addressing the uncertainty exposed by the May flaw that developers patched on June 1.
May Vulnerability Exposed Supply Verification Gap
Security researcher Taylor Hornby, using Anthropic's Claude Opus 4.8, uncovered a four-year-old flaw in Zcash's Orchard shielded pool that could have allowed unlimited counterfeit ZEC creation without detection. Developers patched the bug on June 1, but Zcash's privacy features meant no cryptographic method existed to determine whether the vulnerability had been exploited. The disclosure triggered a price drop for ZEC, which fell from more than $600 to a recent bottom around $300 within two days. ZEC has recovered approximately half those losses, recently trading at $457 according to CoinGecko data.
Developers Report Testnet Activation Progress and Formal Verification Work
In Thursday forum posts, Zcash developer Sean Bowe stated that "sufficient hash rate is signaling technical readiness for the mainnet upgrade" and that "Ironwood's prompt and safe activation on Zcash mainnet is extremely important to our users." Jason McGee of Shielded Labs wrote that testnet activation of the new consensus rules "is expected shortly" and that development teams at Project Tachyon, Valar Group, ZODL, the Zcash Foundation, and Shielded Labs have made significant progress over the past several weeks. Work continues on formal verification of the new circuit, with the goal of completing a proof of soundness before Ironwood activates. McGee stated the current goal is to complete both the Ironwood (NU6.3) network upgrade and ecosystem migration efforts by late July.
Infrastructure Providers Face Migration Challenges to Z3 Stack
Shielded Labs is working to migrate the Zcash ecosystem from legacy Zcashd software to the new Z3 stack, which includes the Zebra full node, Zaino indexing service, and Zallet wallet. Zcash co-founder Zooko Wilcox wrote that Shielded Labs' focus has been "supporting enterprise users (e.g. mining pools, exchanges, and wallets)" and helping them "prepare to safely make the transition to Ironwood." McGee identified infrastructure migration as the largest deployment challenge, noting that key Z3 components including Zallet and Zaino are still under development. A recent questionnaire received mixed responses, with some providers indicating readiness while others said they need additional time. Bowe noted that "some wallets will not be prepared for the upgrade in time" but stated this "does not justify delaying Ironwood, given there will be adequate alternatives and sufficient time on testnet for anyone who needs it." McGee wrote that several options are being considered to reduce deployment risk, including delaying Ironwood, conducting independent third-party security audits before deployment, or temporarily supporting Ironwood through Zcashd while partners complete the migration.
FAQ
What is the Zcash Ironwood upgrade?
Announced in June, Ironwood is a proposed Zcash network upgrade that introduces a new shielded pool and accounting system designed to let anyone verify the network's circulating supply while preserving transaction privacy.
Why did Zcash developers propose the Ironwood upgrade?
The upgrade is intended to eliminate the uncertainty exposed by the Orchard vulnerability in May, which left developers unable to prove whether counterfeit ZEC had ever been created after a four-year-old flaw was discovered that could have allowed unlimited counterfeit ZEC creation without detection.
When do developers expect to complete the Ironwood upgrade?
Jason McGee of Shielded Labs stated the current goal is to complete both the Ironwood network upgrade and ecosystem migration efforts by late July, with testnet activation of the new consensus rules expected shortly.
