Privacy Coins

Privacy Coins Roundup: Zcash Braces for Ironwood Fork as Russia Codifies a Privacy-Coin Ban

2026-07-24

Privacy-focused cryptocurrencies are moving through one of their busiest stretches of the year, with Zcash racing to patch a supply-integrity scare before a major hard fork, Russia moving to formally exclude privacy coins from its new legal crypto market, and Monero and Dash each grinding through their own versions of the same regulatory squeeze.

The most urgent story is Zcash's. A soundness vulnerability in the network's Orchard shielded pool, discovered by researcher Taylor Hornby of Shielded Labs on May 29, was publicly disclosed in early June. Following public disclosure of the Orchard vulnerability on June 3, ZEC fell about 50% from $602.68 to $299.25. Developers moved fast: developers first disabled Orchard transactions entirely through a temporary network patch, then activated the NU6.2 hard fork on June 3 to fix the underlying code and restore pool functionality. That stopped the bleeding but didn't resolve the deeper problem — nobody could prove counterfeit ZEC hadn't already been minted inside the shielded pool before the fix.

The answer is Ironwood, formally Network Upgrade 6.3. Zcash core developer Sean Bowe said the network will activate Ironwood at block height 3,428,143, expected at around 8 a.m. EST on July 28, confirming a one-week delay from the previously planned July 21 rollout. The mechanism at the center of the upgrade is a "turnstile" checkpoint: Zcash will seal the old Orchard pool, limiting how much ZEC can leave after Ironwood. Ironwood cannot identify fake coins individually but can stop excess hidden supply from escaping Orchard. Zcash founder Zooko Wilcox has stressed that developers believe the flaw was "unlikely to have been exploited," but users cannot independently prove no counterfeit ZEC was created — which is precisely why the turnstile migration matters for restoring confidence. Separately, the network hit another infrastructure milestone this month: the legacy zcashd client reached end-of-life on July 18, with node operators required to migrate to the Rust-based Zebra client and the Zallet wallet.

Zcash's price action has been a rollercoaster tied to both the bug and to institutional interest. ZEC had already run to fresh 2026 highs in May after Multicoin Capital partner Tushar Jain disclosed the firm's position in a long X thread, framing ZEC as protection against wealth taxes and government scrutiny, with the token up roughly 30% in 24 hours and around 110% over the past 30 days at the time. By early July, privacy coins broadly were rallying again, with Zcash, Monero and Bitcoin Cash all posting gains as traders rotated back into the sector after months out of favor.

The regulatory backdrop got considerably more concrete this week. Russia's State Duma passed the country's first comprehensive crypto law on July 21, and it explicitly locks privacy coins out of the legal market. Russia's State Duma approved the country's first comprehensive cryptocurrency law, creating a legal framework for exchanges, depositories and other digital asset providers starting Sept. 1, restricting crypto trading to entities in a special registry and capping annual purchases by retail investors at about $3,800 per licensed intermediary. Coins like Monero, Zcash and Dash are named casualties of the new whitelist system: privacy-focused coins are excluded on anti-money-laundering grounds, narrowing eligible trading largely to assets like bitcoin, ethereum and USDT. Market-cap and volume thresholds in the bill are steep enough that strict thresholds — an average market cap above 5 trillion rubles over two years and average daily volume above 1 trillion rubles — are expected to confine early trading to bitcoin and ether, with solana a possible third, while privacy coins that hide transaction data stay barred.

Monero, for its part, keeps developing despite being the most frequently delisted privacy asset in the industry. Binance's 2024 removal of Monero spot pairs, which cited review factors such as liquidity, development activity, network stability, and regulatory requirements, kicked off a wave that other trackers now put at 70 or more delistings affecting Monero since 2024, with pressure strongest in parts of Europe and Asia. Development hasn't slowed: the July "Fluorine Fermi" GUI/CLI release delivered stability fixes and improved defenses against spy nodes, while the team's more ambitious FCMP++ overhaul — which aims to expand Monero's anonymity set from 16 outputs to over 150 million across the entire chain history — has an alpha stagenet running as of mid-2026.

Dash, the least strictly private of the three major coins, is threading a different needle. Days after the Bangko Sentral ng Pilipinas issued rules banning licensed virtual-asset providers from listing anonymity-enhancing coins, Dash's team said it was still evaluating the Philippine market. At Philippine Blockchain Week 2026, the project's global adoption lead, Daria Chernozub, said Dash is prioritizing legal compliance and has already prepared a legal opinion for regulators as it courts a market with strong demand for low-cost payments — a sign that even the more transparent-leaning privacy coins are having to actively negotiate their way past blanket bans rather than simply absorb them.

Taken together, the last two weeks underline the sector's defining tension: genuine cryptographic progress — Ironwood's turnstile, Monero's FCMP++, Zebra's full rollout — arriving in lockstep with an accelerating wave of state-level exclusions, from Moscow to Manila, that increasingly treat "privacy coin" as its own regulatory category rather than just another crypto asset.

Source & further reading:

Sources