Zcash Orchard bug could have minted unlimited counterfeit…

Zcash founder Zooko Wilcox disclosed that security researcher Taylor Hornby discovered a critical counterfeiting vulnerability in Zcash's Orchard pool on May 29. The Zcash Open Development Lab coordinated an emergency response, completed on June 2. ZEC has plunged 29.0% in 24 hours to $443.05 in the wake of the disclosure.

Why it matters

Shielded Labs confirmed the bug was real and exploitable — a local test exploit demonstrated the ability to generate unlimited, undetectable counterfeit ZEC. The severity is compounded by Orchard's privacy design: because transactions in the pool are shielded by construction, it is cryptographically impossible to prove whether the vulnerability was exploited before the patch was deployed. Shielded Labs believes prior exploitation was unlikely, but cannot rule it out with certainty.

Market impact

The inability to cryptographically verify supply integrity is a fundamental threat to any monetary asset, and the market is pricing that uncertainty hard. Shielded Labs is now exploring a network upgrade specifically designed to audit Zcash's total supply and prove the non-existence of counterfeit ZEC in the Orchard pool. Until that upgrade ships and provides a clean bill of health, ZEC faces a persistent credibility overhang — the unresolved question of whether phantom coins exist in the shielded pool is exactly the kind of uncertainty that keeps institutional capital on the sidelines.