The Zcash network has activated the Ironwood update to fix the vulnerability in the Orchard protocol

7/29/2026, 07:21 AMЕвгения Слив

On July 28, the Ironwood update was successfully deployed on the main Zcash network at block 3,428,143. This upgrade is aimed at replacing Orchard's private transaction pool, which revealed a critical vulnerability at the end of May. The error, discovered by a Shielded Labs security engineer using artificial intelligence algorithms, theoretically allowed for the unnoticeable issuance of counterfeit coins. Despite the absence of recorded cases of exploitation, the architecture of the private pool does not allow cryptographically confirming the absence of such incidents, which required immediate corrective measures on the part of the developers.

The Ironwood update solves the identified problem by implementing strict controls at the pool boundary. The Orchard protocol has been switched to a limited mode of operation, in which the flow of new funds is blocked, and existing assets can only be withdrawn through a special transfer mechanism to a new pool. A mathematically verified mechanism has been integrated at the protocol level to ensure that the amount of funds withdrawn from the old repository does not exceed the amount of assets previously received. The Ironwood protocol itself has undergone a formal verification procedure and an independent security audit, which confirms its reliability.

The migration process is implemented at the client application level, which will offer users automatic or manual transfer of funds without the need to create new cryptographic addresses. Incoming transactions to existing Orchard addresses will be automatically redirected to the updated pool. The launch of this upgrade did not cause significant fluctuations in the ZEC exchange rate, as the deployment date was announced in advance. The current slight decrease in the value of the asset reflects the overall market dynamics, while the main correction, amounting to 48 percent, occurred in early June immediately after the initial disclosure of information about the vulnerability.

***

The material has been prepared solely for informational purposes and does not constitute financial advice or recommendation.

Popular news