TheBlock
Zcash Open Development Lab founder Josh Swihart has detailed the two-step emergency upgrade that resolved a critical vulnerability in Zcash's Orchard shielded pool, confirming that a soft fork disabled Orchard transactions to mitigate risk before a hard fork (NU6.2) was activated on June 3 to fix the underlying issue and re-enable the pool.
ZEC has rebounded 41.5% from a June 5 low of $303 to trade at $428.67, recovering partially after a more than 50% plunge from around $630 that followed Shielded Labs' disclosure of a bug that could have allowed unlimited counterfeiting of ZEC. The team says it is unlikely an actual exploit occurred.
Why it matters
Orchard is Zcash's primary shielded transaction pool, the zero-knowledge proof system that underpins the network's privacy guarantees. A bug in that circuit exposed the protocol to potential unlimited minting of counterfeit ZEC, the worst-case scenario for any monetary network. The coordinated response, involving ViaBTC and Foundry mining pools plus exchange code reviews, points to a more mature incident-response posture than Zcash has shown in past stress events.
The episode has already cost Zcash significant credibility. BitMEX co-founder Arthur Hayes announced he liquidated his entire ZEC position following the disclosure, and a broader wave of long-position liquidations topped $100 million as the price collapsed.
Market impact
The 42% rebound from the lows shows real bid returning, but the price remains roughly a third below pre-disclosure levels. Forward-looking, ZODL is now proposing a successor shielded pool called Ironwood, built on Orchard with formal verification and additional independent audits, alongside Tachyon, Valar Group, the Zcash Foundation, and Shielded Labs. Ironwood is being positioned as the next hardening step for the protocol, but the market will judge the network on whether the disclosure cycle costs Zcash its standing among privacy-coin holders.
Frequently asked questions
-
What vulnerability was found in Zcash's Orchard pool?
Shielded Labs disclosed a severe bug in the Orchard shielded transaction pool that could have allowed unlimited counterfeiting of ZEC. ZODL says it is unlikely an actual exploit occurred.
-
How did ZODL fix the Zcash Orchard vulnerability?
ZODL deployed a two-step upgrade: a soft fork that disabled Orchard transactions to limit risk, followed by hard fork NU6.2 activated on June 3 to address the underlying issue and re-enable the pool.
-
How far did ZEC price fall after the disclosure?
ZEC dropped more than 50%, from around $630 to a low of roughly $303, as the disclosure hit the market. Long-position liquidations topped $100 million during the sell-off.
-
How much has ZEC recovered since the low?
ZEC has rebounded 41.5% from the June 5 low of $303 to trade at $428.67, though it remains roughly a third below its pre-disclosure price level.
-
What is Ironwood and what does it mean for Zcash?
Ironwood is a proposed new shielded pool and network upgrade from ZODL, Tachyon, Valar Group, the Zcash Foundation, and Shielded Labs. It builds on Orchard with formal verification and additional independent audits, framed as the next step in hardening the protocol.
CoinTelegraph
Crypto News
CoinDesk
CryptoSlate