Zcash has frozen a $1.7 billion security fund that it was unable to audit
Zcash activated the Ironwood upgrade, officially named NU6.3, at block height 3,428,143, sealing the Orchard protection pool containing approximately 3.66 million ZEC and opening an alternative pool starting with zero coins.
9/16/20264 min read
Privacy issues arising from security vulnerabilities.
This vulnerability exposed a core structural contradiction in the design of protected cryptocurrencies. Zcash's protected pools conceal transaction amounts and participants through their structure, which is the product's core flaw. This characteristic means that no observer, including the protocol developers, can independently verify that the total value within a protected pool matches the total value that has been legitimately deposited into it.
Under normal circumstances, this is acceptable because zero-knowledge proofs enforce cryptographic accounting. A transaction can only spend its intrinsic value. The proof-of-concept system is the guarantee.
Hornby discovered that Orchard's proof-of-concept circuit contained a truth error, meaning the system could accept proof for transactions that shouldn't have been possible. If exploited, an attacker could generate ZEC out of thin air within the pool, and this money would be indistinguishable from legitimate funds. Privacy protection for users from surveillance also protects any counterfeiters from detection.
The developers consider mining to be uncertain, but "uncertain" is a probabilistic estimate, not a verification. For a monetary asset, this distinction is crucial. Approximately $1.65 billion in value is protected within a fund whose supply integrity cannot be verified in any way.
The "turntable gate" mechanism and the dilemma it creates.
The core mechanism of Ironwood seems simple at first glance. This new pool of coins is initially empty. Each coin must be transferred by its owner, and the only way out of Orchard is through a "turning gate," an accounting rule at the pool boundary designed to limit the total amount withdrawn to the total amount deposited in a verifiable manner. The subtlety lies in what that creates. As the original proposal stated, any counterfeiter faces a choice: attempt to transfer the counterfeit coins and risk revealing their existence, or leave them and risk being unable to transfer them again.
If counterfeit ZEC is found, the amount withdrawn from Orchard will ultimately exceed the verifiable deposit amount, and the "turntable" will publicly disclose the discrepancy. If the counterfeiter refuses to transfer the funds, the money will be permanently trapped in a closed pool with no way out. Both outcomes restore auditability. The uncertainty is resolved through a conversion process that does not require anyone to violate privacy or check their personal balances.
That design is why Ironwood is more important than Zcash in particular. It demonstrates that a security system can be audited at the overall level without compromising transaction-level security, by using boundary accounting instead of disclosing information.
Ironwood's additions go beyond bug fixes.
The replacement system is not simply a patched version of Orchard. Ironwood introduces formally validated proof circuits, meaning the correctness of the cryptographic logic has been mathematically proven, not just tested—a kind of assurance that would have detected the integrity vulnerability before deployment.
It also adds record-keeping capabilities against quantum attacks, bringing Zcash in line with Ethereum's December 2029 post-quantum deadline and the broader infrastructure transition that Google, Cloudflare, and Microsoft have been aiming for around the same time. For a secure blockchain, quantum resistance carries added weight: an adversary capable of breaking the cryptography protecting a shielded system would not only be able to steal but also decrypt past transactions.
This upgrade represents collaborative work between the Zcash Open Development Lab, Shielded Labs, Project Tachyon, the Zcash Foundation, and other ecosystem participants, with additional independent audits and formal verification assessments committed to eliminating future integrity issues.
The transition process is voluntary and not yet complete.
Orchard has been locked into new deposits and internal transfers, but existing holders are not required to convert by any deadline. The conversion process reached approximately 87% at the end of August and 88.2% on September 10, leaving around 427,000 ZEC still in the old pool.
That remaining balance is an undetermined variable during the audit process. The conversion mechanism can only confirm the integrity of the supply when sufficient value is converted for the comparison to be meaningful. A remaining amount of money that is never converted creates permanent ambiguity, although this ambiguity is diminishing, and the structure incentivizes action against holders leaving the money indefinitely because the locked money cannot be spent within the group.
The most plausible explanation for the remaining balance is due to common inertia: holders using outdated wallet software, custodians not yet completing the migration process, addresses being inactive for extended periods, and funds that the owner has lost access to. These scenarios describe the same surplus that persists after each blockchain migration.
Assessment and Conclusion
The remaining Orchard balance, the continued growth of protected balances in general, and the proposed NU7 improvements will determine whether this recovery leads to sustainable adoption or simply restores the position Zcash held before the disclosure.
A more applicable lesson relates to how security protocols handle the verification problem. Zcash spent four years operating a pool whose supply was unauditable, discovered a vulnerability that made that unverification physically dangerous, and resolved it by building a boundary where aggregate accounting became auditable without exposing individual transactions. Any security system faces some version of that trade-off. Ironwood is the clearest example to date that it can be designed, not simply accepted.
Disclaimer: The content in this article is for informational, research, data analysis, and reference purposes only regarding the cryptocurrency market. All opinions, assessments, forecasts, or opinions reflect the author's perspective at the time of publication and do not constitute investment advice, solicitations for buying or selling, trading recommendations, advertising, marketing, or promotion of any financial products, services, or cryptocurrencies. Mentions of projects, tokens, protocols, exchanges, wallets, or cryptocurrency service providers (CASPs) are for research, analysis, or informational purposes only and should not be construed as endorsements, recommendations, or guarantees in any way. HCCVenture does not broker, advertise, market, promote, or connect users in Vietnam with any cryptocurrency services from CASPs. HCCVenture does not accept asset custody, investment mandates, manage assets, or execute transactions on behalf of clients. All investment decisions are made entirely through the reader's own research (DYOR), evaluation, and responsibility; HCCVenture is not liable for any losses or damages arising from the use of or reliance on the information presented in this article.
Compiled and analyzed by HCCVenture
Join our information channels: https://link3.to/holdcoincventure
Explore HCCVenture group
HCCVENTURE QUANT JSCO
© 2026 HCCVENTURE. ALL COPYRIGHTS RESERVED.
Connect with us
Popular content
Contact to us
Address: 8th Floor, Bach Dang Complex Building, 50 Bach Dang Street, Hai Chau Ward, Da Nang City, Vietnam.
Phone: 1900 1509
Gmail : sp_contact@hccventure.com
Disclaimer: The information on this website is for informational purposes only and should not be considered investment advice. We are not responsible for any risks or losses arising from investment decisions based on the content here.
TERMS AND CONDITIONS • CUSTOMER PROTECTION POLICY
ANALYTICAL AND NEWS CONTENT IS COMPILED AND PROVIDED BY EXPERTS IN THE FIELD OF DIGITAL FINANCE AND BLOCKCHAIN BELONGING TO HCCVENTURE ORGANIZATION, INCLUDING OWNERSHIP OF THE CONTENT.
RESPONSIBLE FOR MANAGING ALL CONTENT AND ANALYSIS: HCCVENTURE FOUNDER - TRUONG MINH HUY
Read warnings about scams and phishing emails — REPORT A PROBLEM WITH OUR SITE.
