Privacy Coins Security

Zcash's Ironwood Pool Limps Forward: Only 5% Have Migrated as Users Dodge the Privacy Leak

2026-07-29

Zcash switched on Ironwood (NU6.3) on July 28, 2026, and almost immediately confirmed what everyone suspected: nobody wants to be first through the door. Roughly 5% of Orchard's 3.66 million ZEC—about $80 million—has moved into the new pool so far. The rest sits behind a gate that's now permanently sealed to new deposits.

Why the cautious approach? Because four years ago, someone hid a bug inside Zcash's previous shielded pool so well that nobody noticed it. Taylor Hornby, a security engineer at Shielded Labs, finally spotted the vulnerability in May 2026. It was a counterfeiting flaw—the kind that would let someone mint unlimited ZEC without getting caught. The thing had been living in Orchard since its activation in May 2022. Nobody knows if it was ever exploited. The pool's private architecture means you can't cryptographically prove that it wasn't. Unnerving.

Rather than patch Orchard and cross their fingers, Zcash developers did the sensible thing: they built an entirely new pool and turned Orchard into a one-way exit. Every coin now has to pass through a turnstile. You can only withdraw what was legitimately deposited. If counterfeit coins exist inside, any attempt to pull out more than went in triggers an immediate accounting failure. It's elegant in a bleak way—cryptographic certainty without needing to rewind history.

The evidence does suggest nobody counterfeited anything. A CoinDesk Research report found that if someone had minted fake ZEC, the rational move would be to cash out immediately and move it onto an exchange. Orchard's balance grew steadily over four years, even through last year's price rally when the profit incentive to dump coins would've been strongest. The math doesn't fit exploitation.

But here's where things get awkward. Moving coins into Ironwood creates a temporary privacy nightmare. Normally, your shielded ZEC transactions don't leak amounts to your wallet server. But the migration requires every holder to move funds, and if you do that without precautions, you expose your IP address to information linking it to your wallet balance. That's precisely what shielded pools are supposed to prevent. Nym, a privacy infrastructure provider, flagged this explicitly. The Zcash team's answer: don't rush. Use Tor or NymVPN while migrating.

The slow migration pace—just 5% in day one—might reflect users taking that advice seriously. Or they're simply waiting for exchanges and wallet providers to finish their integration work before moving larger amounts. Hard to say.

Ironwood does bring upgrades. It includes quantum-resistant transaction records and formally verified cryptography designed to tighten future defences. A machine-checked mathematical proof of over 2,700 theorems confirms the design can't produce undetectable counterfeits under its assumptions. So the long-term security posture is stronger.

Meanwhile, nearly $1.7 billion in locked funds still sit in Orchard, a pool that can no longer accept deposits. The timeline for resolving the whole mess now depends on how quickly exchanges, wallet providers, and individual users finish the transition. Caution makes sense here. Moving money is one thing. Moving it while exposing your privacy is another.

Source & further reading:

Sources