Zcash Ironwood Upgrade Completes to Patch Orchard Pool Flaw, Aims for July


Author

Ahmed Barakat

Author

Ahmed BarakatIt has been confirmed

Team Part Starting

August 2025

About the Author

Ahmed Balaha is a journalist and author from Georgia who focuses on blockchain technology, DeFi, AI, privacy, digital economy, and fintech.


Facts Checked by

CryptoNews Editorial Team

Author

CryptoNews Editorial TeamIt has been confirmed

Team Part Starting

September 2018

About the Author

The editorial team of CryptoNews is made up of writers with experience in cryptocurrency and blockchain technology. Their technology ensures complete, accurate, and intelligent…

Last updated:

The developers of Zcash have completed the changes to the consensus rules for the Ironwood upgrade, following the end of July. The aim is to initiate the opening of the block height 3,417,100 to deal with the large risk in the Orchard security pool which showed that the ZEC network is created without limits.

The upgrade introduces a secure pool, strengthens the flow of products through existing systems, and stops new payments coming to the compromised Orchard pool, all with the help of proven zero-certification circuits and an independent third-party security review.

Find out: The Best Trading Signals

The Orchard Pool Bug: Ironwood Fixes Zcash

Orchard Pool was introduced in May 2022 as part of the NU5 upgrade, which brought the Halo 2 experience. Zcash and positioning the Orchard as a private sector for the next generation. It is a secure environment that supports zero-knowledge to hide the number of transactions and the addresses of the participants without the establishment of trust.

The flaw discovered in early 2026 was in the Orchard protocol: the attacker was able to create a fake ZEC without the chain being recognized through proper authentication.

Close-up of the Zcash ZEC cryptocurrency against a blurred background.

This problem meant that all ZEC funds that were subject to the agreement were not tied up within the Orchard pool. Because Zcash’s infrastructure is what makes Orchard private, the same thing that protects user credentials also creates unauthorized leaks invisible to outside observers, and, more importantly, to the Zcash development team itself.

AI-assisted security checks by outside researchers uncovered the flaw, leading to calm and a coordinated disclosure before Ironwood was exposed.

Note: The best crypto to change your profile

Turnstile, New Pool, and Supply Verification

Ironwood was jointly provided by ZODL, Tachyon, Valar Group, Zcash Foundation, and Shielded Labs, a multi-party governance group that differentiates this solution from a single entity.

The basic upgrade mechanism is a redesigned part of Orchard that includes a flag that can stop payments to certain users within the pool while maintaining the ability to create editable posts, which Bowe described as privacy protection.

Once activated, the flag will be permanently lit at the Orchard pool, preventing it valueBalance field and direct all new Orchard payments automatically to the replacement pool.

The management of Ironwood managed products relies on a pre-optimized protocol; Every ZEC leaving the old Orchard pool must pass through the river before entering the new pool, and the turnstile ensures that the total value of the exit from the old pool cannot exceed the value it entered.

Bowe said: “This integration allows ZEC to work with existing exchange systems; the amount of ZEC that anyone can do is the amount that needs to be there.”

Once the migration is complete, the on-chain data will allow each node to verify that no fraudulent ZEC has passed through the new pool, restoring trustless authentication at the protocol level for the first time since the attack.

The opening target coincides with zcashd ending support at block 3,417,100. Testnet testing, environmental integration, and final security checks are still good before the mainnet launch. Orchard wallet providers are expected to provide one-click transfer tools, and the new pool is designed to store existing addresses, avoiding changes in users’ passwords.

Find out: The Best Trading Signals






Source link

Leave a Reply

Your email address will not be published. Required fields are marked *