Zcash is taking technical steps to secure its network through a hard fork named Ironwood (NU6.3), scheduled to launch on July 28 at block 3,428,143. The upgrade has a specific goal: shutting down access to the legacy Orchard pool and migrating users to a new shielded pool. This new pool is built using circuits that have been patched to resolve a previously discovered vulnerability.
The shutdown plan stems from a report by security researcher Taylor Hornby on May 29. While conducting a security audit on Zcash’s shielded system, Hornby detected a critical bug. This flaw provided an opening for attackers to mint counterfeit ZEC within the Orchard environment without leaving a clear public record. The Zcash development team stated that the probability of the vulnerability being exploited is low. Unfortunately, Orchard’s privacy layer makes it impossible to verify this claim with certainty through on-chain data.
Turnstile Trap Locks Down Counterfeit Coins
To mitigate the risk of counterfeit money entering circulation, Zcash has set up a quarantine system. Zcash founder Zooko Wilcox detailed this transition scenario in an X post on July 19. Once the Ironwood upgrade officially takes effect, users will lose all access to send or receive ZEC within the legacy Orchard pool.
Any funds remaining in the legacy pool can only be withdrawn through a dedicated pathway called a turnstile. This system operates as a limiting valve that rejects ZEC withdrawals if the amount exceeds the total legitimate coins ever deposited. Under these rules, any counterfeit ZEC that may have been minted prior to the patch will be trapped indefinitely in the old pool, preventing that value from entering the circulating supply.
Price Anticipation and Next Steps
The resolution of this security vulnerability was met with buying sentiment in the market. The price of ZEC rallied above $500 ahead of the hard fork launch, aligning with investor optimism. For coin holders, this upgrade requires no technical action. Crypto exchanges and wallet providers will likely only suspend deposit and withdrawal services temporarily while synchronization is underway.
Behind the scenes, the network inspection process is still ongoing. Zcash commissioned the Anthropic Mythos system to conduct an AI-driven review of its codebase. The results confirmed that no additional severe vulnerabilities remained following the initial discovery. To ensure the upgrade is robust, Zcash is also pursuing independent audits and finalizing formal verification of its new cryptographic architecture. Reported by crypto.news.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
