Zcash will deploy its Ironwood upgrade to mainnet on July 28, introducing critical security fixes following disclosure of a vulnerability in the privacy-focused blockchain's Orchard pool that enabled the creation of unlimited counterfeit coins undetected by the network.
The vulnerability, discovered in May and present since 2022, posed a theoretical risk to ZEC's monetary integrity. The upgrade introduces a new formally-verified Ironwood privacy pool to replace the vulnerable Orchard pool, implements a mechanism to verify the total coin supply across the network, and permanently seals the legacy Orchard pool to prevent future exploitation.
The deployment represents the most significant security hardening for Zcash since the vulnerability surfaced, addressing what could have been a fundamental threat to the cryptocurrency's credibility. The formal verification of the new Ironwood pool marks an elevated security standard for the network's private transaction infrastructure.