$80M Shifts to Ironwood Shielded Pool
Zcash users moved approximately 176,000 ZEC—valued at about $81 million—into the newly launched Ironwood shielded pool within just 24 hours of its activation, according to coindesk.com.
The transparent pool remains the largest by volume, holding about 12.5 million ZEC, while the older Sapling shielded pool—introduced back in 2018—still contains approximately 582,000 ZEC. With Orchard now unable to accept new deposits after holding about 3.7 million ZEC at its peak, all eyes are on how quickly users will complete their migrations to the new system.
Around 46,000 ZEC crossed from Orchard to Ironwood in the past 24 hours, according to the Ironwood migration tracker.
Orchard Pool Retired After Flaw Discovery
The urgency behind Ironwood’s rollout stems from a critical vulnerability discovered in May by security researcher Taylor Hornby. The flaw had lingered undetected in Orchard for four years and could have enabled the creation of counterfeit ZEC coins—a direct threat to the cryptocurrency’s fixed supply model and user trust. Developers responded swiftly with an emergency patch in June, but due to the privacy features inherent in shielded transactions, it remains unclear whether any exploitation actually occurred.
On paper, shielded pools are supposed to guarantee both privacy and integrity; in practice, however, this bug exposed a gap that forced developers to retire Orchard entirely. The migration process now requires funds leaving Orchard for Ironwood to pass through a public checkpoint known as a "turnstile," ensuring that no more coins exit than were originally deposited—a measure designed specifically to trap any counterfeit tokens that may have been created during the vulnerability window.
Zcash’s move comes after its market value plunged by 38% following news of the bug before rebounding by $2.5 billion once plans for Ironwood were announced.
Balance Integrity Now Machine-Proven
Ironwood isn’t just a new pool—it arrives with formal mathematical guarantees. Researchers spent over a month producing more than 2,700 machine-verified theorems using the Lean programming language to prove that Ironwood’s system enforces what they call "balance integrity." This means that under all permitted operations and circuit rules, it is mathematically impossible for undetectable counterfeiting bugs like those found in Orchard to occur again within this new pool.
This formal proof covers Ironwood’s zero-knowledge proof system and ledger-level accounting but does not extend to privacy guarantees themselves. The verification effort required collaboration among three teams of cryptographers and researchers and was published publicly alongside the upgrade. For users concerned about technical assurances rather than just promises, this represents a tangible shift toward verifiable security in privacy-centric cryptocurrencies.
Why It Matters
For everyday Zcash holders, these changes have immediate practical consequences. Those with funds in Orchard must now migrate their assets through the turnstile checkpoint into Ironwood; failure to do so could eventually leave coins stranded as support for Orchard is phased out. The introduction of quantum-resistant transaction records also aims to future-proof user balances against advances in computing power that could threaten cryptographic security down the line.
However, privacy advocates have flagged potential risks during migration: developers recommend using tools like Tor or NymVPN when moving funds between pools due to possible deanonymization at public checkpoints. While Ironwood’s proof circuit has been formally verified for balance integrity, it does not guarantee absolute privacy during these transitions.
Vulnerability Fallout Still Unclear
Despite emergency measures and rapid upgrades, some uncertainty lingers over whether the Orchard bug was ever exploited—and if so, how much damage was done before detection. Because shielded transactions are intentionally opaque by design, tracing any potential counterfeiting events is nearly impossible without explicit evidence surfacing.
With over $1.7 billion worth of ZEC previously sitting in Orchard at retirement and roughly $80 million already moved into Ironwood on day one alone, confidence appears to be returning among users—but full transparency regarding past exploits may never be possible given Zcash’s privacy model.
What investors will be watching
Investors will be monitoring the pace of ZEC migration from the Orchard pool, which held about 3.66 million ZEC at Ironwood activation, to the new Ironwood shielded pool—if significant balances remain in Orchard over the coming days despite deposits being disabled, it would immediately signal user hesitancy or technical friction in the migration process.
